UNCLASSIFIED- FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 

TABLE OF CONTENTS 


1 (U) Scope and Purpose — 1-1 

1.2 (U) Purpose , ■' ' ' . . . . ...... 1 - 1 

2 (UJ General Authorities and Principles ...... 2*1 

2.1 (U) Authority of the Attorney General's Guidelines for Domestic FBI Operations.. ..... 2-1 

2.2 (U) General FBI Authorities under AGG-Dom . .. .............. ... 2-2 

2.2. 1 (U) Conduct I n vestigations and Collect Intelligence and Evidence ........... 2-2 

2.2.2 (U) Provide Investigative Assistance __ . . ........... 2-2 

2.2.3 (U) Conduct Intelligence Analysis and Planning . . , , , 2-2 

2.2.4 (U) Retain and Share I n form ation ...... . . ....... ................... 2- 2 

2.3 (U) FB I as an I ntelligence Agency 2- 2 

2.4 (U)FBI Lead Investigative Authorities ...... . . ....... 2-3 

2.4. 1 f U) I ntroducti on.. ..... . , — — 2- 3 

2.4.2 (U) Terrorism and Counterterrorism Investigations.,,.,...,. . 2-3 

2.4.3 (If) Counterintel ligence and E spio nage I n vestigations - 2 -B 

2.4.4 f U) Crimi nail n vestigations..,..,....,. ... ... _______ .... _ 2-9 

2.4.5 (U) Authority of an FBI Special Agent _.., ,..2-9 

2.5 (U) Status as I nte m al Guidance ... 2- 10 

2.6 (UJ De parture from the AGG-Dom (AGG-Dom I .D,3) _ ___._2- 1 0 

2.6.1 (U) Definition ■- .... — - ...2- 10 

2.6.2 (U) Departure from the AGG-Dom in Advance ,.2-10 

2.6.3 (U) Em ergen cy Departures from the AGG-Dom _ .....2- 1 0 

2.6.4 (U) Records of Departures from the AGG-Dom ......2- 1 1 

2.7 (U) Departures from the DIOG 2-11 

2.7.1 (UJ Definition .2-11 

2.7.2 [U] Departure from the DIOG... , ..... _ ...2-1 1 

2.7.3 (UJ Emergency Departures from the DIOG .... .... 2-11 

2.7.4 ( U J Records of Departures from th e DIOG .2- 1 2 

2.8 (10 Discovery of N on -compli ance wi th D IOG Requi rements after-the-fa ct, ... 2-12 

2.8.1 (UJ Substantial Non-Compliance with the DIOG ..... 2-12 

2.5.2 (UJ Documentation of Substantial non-Compliance ..... ,.,.,.2-13 


iii 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Version [Sated. 
October 15, 2011 


. NCLASSJF1FD - F Oft OFFICIAL USE ONLY 
Domestic Investigations and Operation s Guide 


IA3 . tea -.-— — . 2-14 

2A4 IfLT R^rfC-CaadOGC — - — — 2-14 

-S 5 V - 103 ZEStters .-v.-'rv .?.£ 'he reports of Substantial Non-Com piiance 2-1 4 

2 8 6 7 Repc-rti "g \ an-Cjz: piiance ‘.vjth Policy Implementation Guides , — 2-14 

2,8,7 [UJ Reporting Non-Compliance with other FBI Policies and Procedures (outside 

the Dl OG) .. 2- 1 5 

2.9 (U) Other FBI Activities Not Limited by AGG-Dom,....^,... ....... ...........2-15 

2.10 (U) Use of Classified Investigative Technologies.,... . 2-15 

2.11 (U) Application of AGG-Dom and DiQG .......... ........ .... .. 2- IS 


3 (U) Core Values, Roles, and Responsibilities. 


3-1 


3.1 (U] The FBI's Core Values.... — 

3.1.1 (U) Compliance...... — ....... , 

3.2 fU] Investigative Authority. Roles and Responsibility of the Director's Office. 

3.2.1 [U] Director's Authority, Roles and Responsibility,.,.,..,.....,. . ........ 

3.2.2 (UJ Deputy Director's Authority. Roles and Responsibility, 

3.3 (UJ Special Agent/ intelligence Analyst/Task Force Officer (TFOJ/Task Force Member 

(TFM j/Task Force Participant (TFPJ/FB1 Contractor/Others ■ Roles and 
Responsibilities . ... ...... 

3.3.1 (U) Roles and PwyrtwriihiHH^ 

3.3.1. 1 (U) Training.,..,.,. _ ^ — 

3.3.1 2. f U) in vestiptive Activity. ........... . .. ... 

3. 3 .1.3 f U) Pri vacy and Civi I Liberties .. 

3.3.1.4 (U) Protect Rights .... .... _ .... 

3.3. 1.5 (U) Compliance ...... 

3.3.1.G (U) Report Non-Compliance.. .... .............. 

3.3.1.7 (U] Assist Victims. 

3.3. 1.8 £U) Obtain Approval — 

3.3.1.9 (U) Attribute Information to Originator in Reports ........ ........ 

3.3.1.10 (U) Serve as Investigation ("Case*) Manager... .... ..... 

3.3.1. 1 1 (U) Create and Maintain Records/Files .......... ... 

3.3.1.12 (U) Index Documents... ......... 

3.3.1.13 (U) Seek Federal Prosecution... ... 

3.3.1.14 (U) Retain Notes Made During An Invesfiption...., ........ 

3.3.2 (UJ Definitions of Task Force Officer (TFO], Task Force Member [TFMJ, and Task 

Force Participant (TFP).. .... .... 


.... 3 A 
..3-1 
...3-2 
...3-2 
...3-2 


— 3-3 
... 3-3 
...3-3 

3-3 

3-3 

...3-4 
... 3-4 
.... 3-4 
..3-4 
.. 3-4 
3-4 
...3-4 
... 3-5 
.. 3-5 
.. 3-5 
...3-5 

...3-6 


Version Bated : 
October SS.ZOtl 


IV 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


3.3.21 (U) Task Force Officer (TFO) _ .... 

3.3 .2.2 (U) Task Force Member (TFM) - 

3.3.2.S (U) Task Force Participant (TFP) (i,e, t Task Force Liaison)..... .... 

3.4 (U) Supervisor Roles and Responsibilities......... ... ......... 

3.4. 1 (U) Supervisor Defi n ed ... ...... ... .... 

3.4.2 (U) Supervisor Responsibilities ............ .... ...... .......... 

3.42.1 (LT) Approval /Review of Investigative or Collection Activities .... 

3.42.2 (U) Oral Authority / Approval ....... . ...... 

3. 42.3 (U) No Se! f- Appro val Rule ......... — - 

3.42.4 (LI) Ensure Compliance with U.S. Regulations and other Applicable Legal and 

Po licy Requirements .......... .... ............ ...... ... 

3.42.5 (U) Trainings........ 

3.4.2.6 (U) Protect Civil Liberties and Privacy ........... .... 

3.4.2.7 (U) Report Compliance Concerns ........ 

34.2.8 (LI) Non- Retaliation Policy.. „. ... 

34.2.9 (U) Create a nd Maintai n Records /Fa les ..... ........... 

3.4.3 (U) Del egation and Succession in the FBI ......... ............ 

3.4.3. 1 (U) Delegation.. .... . .. .. 

3.4.3. 2 (U) Succession: Acting Supervisory Authority ... ...... .... 

3.43.3 (U) Documentation ...... . 

3.4.4 (U) File Reviews and Justification Reviews ... ..... 

3.4.4. 1 (U) Overview. . ... .. 

3.4.4. 2 (U) Types of Files/Investigations Requiring File Reviews and Justification 

Reviews... ..... ...... .. ....... _ ... ... 

3.4. 4. 3 (U) Frequency of File Reviews.. ... .... 

3.4.44 (U) Frequency of Justification Reviews ... 

3.4.4.5 (U) Delegation of File Reviews 

34.4.6 (U) File Review Requirements for Predicated Investigations & Assessments... 

34.4.7 (U) Type 1 Sl 2 Assessments - Justification Reviews .............. — 

34.4.8 (U) Type 3. 4. and 6 Assessments - Assessment Review Standards (ARS) 

34.4.9 (U) Type 5 Assessments - Assessment Review Standards (ARS) 

3.4.4.10 (IT) Documentation of File Reviews ..... .... ............ ........... 

34.4. 11 (U) Records Reten don 

3.5 (U) Chief Division Counsel (CDC) Roles and Responsibilities............ 

3.6 (LF) Office o f th e General Counsel (OGC J Roles and Responsibilities, 

3.7 (U) Corporate Policy Office (CPO) Roles and Responsibilities 


3-6 

... 3-6 

3-6 

...3-7 

3’7 

... 3-7 
..... 3-7 


3’S 


....3-8 
.... 3 8 
.... 3’S 
....3-9 
.... 3-9 

3-9 

.... 3’9 

3-9 

...3-10 

...3-10 

...3-10 

...3-10 

-.3-11 

...3-11 

3-11 

...3-11 

-.3-12 

...3-14 

...2-14 

..3-15 

..3-15 

...3-16 

...3-16 

...3-17 

.,..3-18 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Version DaU*d: 
October IS, 20 II 


1 1 r ft 


^ CLAL USE ONLY 
- i ^rations Guide 

. . ;: Rales and Respan sib tildes, _. 3- IS 

m " -" ^ - : ks an d Respo nsibilities....... .......... .... U J- 19 

:*f : - - - ;t -s. and Responsibilities ..^ *_3-19 

~ ead quarters (FBI HQ) Approval Levels,...^....., 1-19 

•» - -■ . aj»i tfrfl Liberties, and Lease Intrusive Methods..™ 4-1 

|B ~-tl Ubenaes and Privacy ....... ............... • 4-1 

,' 1 3—5QCO: ‘ flf First Amendment Rights — .. ........... 4-4 

Protection underlie Law. ..^.^a^...,. .... ...^..4-11 

. I^ast Intrusive Method , . .... ... .,4-15 

s (Ul A&sessme n ts ._ _...- . 5 - 1 

: I [DJ Overview and Activities Authorized Prior to Opening an Assessment ............... 5-1 

51.1 (IP) Activities Authorized Prior to Opening an Assessments....... .... 5-2 

5.1. LI (U) Public Information .... . ...... 5-2 

5. 1.1. 2 f U) Records or Information - FBI and DOf .....^ ........... 5-2 

5.1.1.3 f U) Records or Information - Other federal, state, local, tribal, or foreign 

government agency.... _ .... ........... ._ ... 5-2 

5.1.1 A- (LI) On-line Services and Resources...... ......... -— t . . 5-2 

5.1.1. 5 (U) Clarifying Interview .... ....~ .... . 5-2 

5. LI. 6 (L) Information Voluntarily Provided by Governmental of Private Entities. ... 5-2 

5.1.2 (U) Documentation Requirements for Record Checks: [Existing /historical 

information referred to in section 5.1.1 above) ............... . . ............. .. 5-2 

5.1.2 [U) Liaison Activities and Tripwires................ .. ........... ..... .... 5-2 

5.2 [U) Purpose and Scope ........ ... .... -— - — . .... 5-2 

5.2.1 (U) Scenarios.. ... , .... .......... 5-4 

5.2 (U) Civil Liberties and Privacy .... ........ .... . . 5-7 

5.4 [U) Five Types of Assessments [AGG-Dom, Part JJ.A.3.)^— ■ 5-B 

5.4.1 [U) Assessment Types.. _ .... . ........ .... 5-8 

5. 5 (U) Standards for Opening or Approving a n Assessment ... ............ 5 -8 

5.6 (U) Position Equivalents, Effective Date, Duration, Documentation, Approval, Notice, 

File Review and Responsible Entity..... ............ ...... .... 5-9 

5.6.1 (U) Field Office and FBIHQ Position Equivalents.... .... 5-9 

5.6.2 f U ) E Recti ve Date of Assessments 5-9 

5.6.3 (II) Assessment Types..................... ........ ........... ....... ... 5-9 


Vara an. Dated: 
October IS, 20 1 


vi 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 

3JJ fU] Office of Integrity and Compliance (OIC) Roles and Responsibilities 3-10 

3.9 (LT) Operational Program Manager Roles and Responsibilities., ,.3-19 

3.10 (Lf) Division Compliance Officer Roles and Responsibilities ....... „ ^.,.^.^,..3-19 

3.11 (U) Position Equivalents - FBI Headquarters [FBI HQ] Approval Levels.,.....^..,.,.., ...........3-19 

4 (U) Privacy and Civil Liberties, and Least Intrusive Methods 4-1 

4. 1 [U) Civi I Liberties and Privacy 4- 1 

4.2 fU) Protection of First Amend me nt Ri ghts _ _ 4- 4 

4.3 fU) Equal Protection under the u .„ u . u .„,..4-ll 

4.4 (U) Least Intrusive Method, ., ., ., ._4-15 

5 (tl) Assessments . 5-1 

5. 1 [U) Overview and Activities Authorized Prior to Opening an Assessment ...... 5 -1 

5.1.1 (U ) Activities Authorized Prior to Opening an Assessment,,.,,.,,,. 5-2 

5. 1.1.1 fU] Public Information,.., „ 5-2 

5.1.1.2 (U] Records or Information - FBI and DQJ ., 5-2 

5. 1.1. 3 (U) Records or Information - Other federal, state, local, tribal, or foreign 

government agency.,.......,.., ....... 5-2 

5. 1. 1.4 (U) On-line Se rvices and Resources L ,,, — - .... 5-2 

5.1. 1.5 (U] Clarifying I ntervie w ... .... 5- 2 

5.1. 1.6 fU] Information Voluntarily Provided by Governmental of Private Entities ...... 5-2 

5.1.2 [0) Documentation Requirements for Record Checks; (Existing /historical 

information referred to in section 5.1.1 above].,.. ... ... .... 5-3 

5.1.3 (U) Liaison Activities and Tripwires „...., ., „..5-3 

5.2 fU) Purpose and Scope __ .. .,„ ... 5- 3 

5.2.1 f U) Scenarios . ... ____ .... 5^J 

5.3 (0) Civil Liberties and Privacy .,..5-7 

5.4 |[U) Five Types of Assessments (AGG-Dom, Part IJjL3.) ., _._..5-B 

5.4. 1 (II) Assessment Types ., ., .. ., 5 -0 

5.5 (U) Standards for Opening or Approving an Assessment,..,..,..^..,...., 5 -B 

5.6 (U) Position Equivalents, Effective Date. Duration, Documentation, Approval, Notice. 

File Review and Responsible Entity .... ....... ...... 5-9 

5.6.1 (U J Field Office and FBI HQ Position Equivalents „.,. 5-9 

5.6.2 (U) Effective Date of Assessments — ., ., ., .,..5-9 

5.6.3 (0) Assessme nt Types .. 5-9 


Version Dated: 
October !5. 2011 


vi 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


S. 63.1 (U) Type 1 & 2 Assessments .... ... . .. . — ... _ 5-9 

5.6.3. 2 (U) Type 3 Assessments...^. ... ............. „ ................ JJ- 1 2 

5.6.3.3 (U) Type 4 Assessments ....... ... ........ .. . ....5-1 7 

5. 6.3.4 (U) Typ e 5 Assessments ............... .. . .......... ....... .... ...... -S-20 

5. 6.3.5 ( UJ Type 6 Assessments ,__...._ . ... . . J5-29 

5,7 (TJ) Sensitive Investigative Matters (SIM) in Assessments .....5-32 

5.7. 1 (U) S I M Categories in Assessments. ...............^..^......,......^....^....................5- 32 

5.7.2 (U) Academic Nexus in Assessments . . .... 5-33 

5. & (U) Standards for Opening or Approvi ng the Use of an Authorized Investigative Method 5-33 

5.9 (U) Authorized Investigative Methods in Assessments., ..... ,., ......5-34 


5.9.1 (U) Type 1 through 4 and Type 6 Assessments ., ^ ......... 5-34 

5.9.2 (U) Type 5 Assessments ... 5-34 

5.10 (U) Other In vestigative Methods Not Authorized During Assessments ............ ,„.5-34 

5.11 (U) I ntell igence Collection (i.e., I ncidenta I Call ection).... . .,..,....,..,..,.5-34 

5.12 (U) Reten tion and Dissemination of Privacy Act Records . .... — .. 5-35 

5,12.1 (U) Marking Closed Assessm ents That Contain Perso nal I nformation_........ .......5-36 

5.12.1.1 (U) Type Ifi 2 Assessments. ..... ... .... ......5-36 

5.12.1 .2 (U) T ype 3, 4, and 6 Assessments,.....,..,... ..............................5-36 

5.12.1.3 (U) Type 5 Assessments............ 5-36 

5. 1 3 (U) Assessment File Records Ma nagement and Retentio n .... ..... ....5-37 

5.14 (U) Other Program Specific Investigation Requirements ..... ..5-37 


6 (U ) Pre I i miliary Investigations 6- 1 

6. 1 [U) Overview .. ...... ....... 6- 1 

6.2 (U) Purpos e and Scope ....... ... .... 6- 1 

6.3 (U) Civil Liberties and Privacy ............. ............. ....... 6-1 

6. 4 fU) Legal Autho rity ........ , .... 6-2 

6.4.1 (U) Criminal Investigations,..^.., ....... ... ......... 6-2 

6.4.2 (U) Threats to the National Security', ................ ...... ... 6-2 

6.5 (U) P redication .... , ......... 6-3 

6.6 (U) Standards for Opening or Approving a Preliminary Investigation, 6-3 

6.7 (U) Opening Documentation. Approval, Effective Date, Notice, Extension, Pending 

Inactive Status, Conversion, and File Review.,... ... ......... ... ..6-4 

6.7. 1 (U) Openi ng Docu mentation,..,... ......... .... ... 6-4 

6,7,1.! £U) Approval / Effective Date / Notice,... 6-4 


vli 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


VersLun Datedi 
October IS, 201 1 



_ V .. L \SSiFLED - FOR OFFICIAL USE ONLY 
' tnesiic Investigations and Operations Guide 


Pending Inactive Status,....,..,...... _____ 6-6 

- " 4 . i ll 1 Conversion to Full Investigation _.., _.„.... 6-6 

f “ 5 (U) File Review,... . , , » ,, ___ 6-6 

a ■ (U| Standards for Opening or Approving the Use of an Authorized Investigative Method 

in Preliminary Investigations . , .. ., . 6-6 

6.9 (U) Authorized Investigative Methods in Preliminary Investigations,.,.., .,._ 6-7 

6.10 [U] Sensitive Investigative Matters [SIM) in Preliminary investigations .... _ 6-6 

6. 10. 1 (U) S I M Categori es in Preliminary I nvestigations _.. _ 6-8 

610.2 (U) Acade mi c Menus in Preliminary I nvestigations +^_4 _ ..... 6-8 

6.1 1 [U] Intelligence Collection [Le.. Incidental! Collection) ., . 6-9 

6.12 ( U) Sta ndards for A pprovi ng the Clos ing of a Prelim i na ry In ves ligation 6-9 

6. 12. 1 (U) Standards _ - ... ... _ 6-9 

6. 12. 2 (U) Approval Requirements to Close ............ -, — .— — 6- 1 0 

6.13 (U) Other Program Specific Investigative Requirements ____ ...... ^.6-10 


7 (U) Full Investigations _ _..._7-i 

7.1 [U) Overview ., ..... ... 7- 1 

7.2 fU) Purpose and Scope ... ., ., 7- 1 

7.3 (U) Civil Liberties and Privacy ....... 7- 1 

7.4 [U) Legal Authority _____ _ _ _____ 7-2 

7.4. 1 f U] C riminal In vestiga lions ...... ..._. ............... 7-2 

7.4.2 ( U] Th reals to the N ational Security __ ...... 7- 3 

7. 4.3 ( U) Foreign Intelligence Collection _____ _ _ __ 7- 3 

7.5 (U) Predication 7-3 

7.6 fU) Standards for Opening or Approving a Full Investigation — ... ... ..... 7-4 

7.7 [U] Opening Documentation, Approval r Effective Date. Notice, Pending Inactive Status. 

File Review, and Letter Head Memorandum ___________ 7-4 

7.7.1 [U] Opening Documentation — 7-4 

7.7. 1.1 (U) Approval / Effective Date / Notice ___ 7-4 

7.7.2 [U] Pending I nactive Status...... ..... ............ * _ _ 7-6 

7.7.3 (U) File Review T ... __ 7-6 

7.7.4 (U) Annual Letterhead Memorandum.,..,.......,. _ ______ __ 7-6 

7.8 (li) Standards for Opening or Approving the Use of an Authorized Investigative Method 

in Full 1 nvestigations............. ..... .......... 7-7 

viii 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Veraon Elated' 
October IS, JO II 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


7.9 (U) Authorized Investigative Methods in Full Investigations ....... ...„ 7-7 

7.10 (U) Sensitive investigative Matters (SIM) in Full investigations., ., 7-B 

7.10.1 f U ] SI M Categori es in Full I nvestigatio ns,._ - : --,. nT . 7’ 8 

7.10.2 (U) Academic Nexus in Ful] Investigations .... 7-9 

7.11 (If) Intelligence Co] lection (i,e., incidental Collertion),^..^,..,.,.., 7-9 

7.12 (U] Standards for Approving the Closing of a Full I nvestigatio n.,„.., .,.,..,..-,..,..^,..^...,7- 10 

7.12.1 (U J Standards ___ „. 7 - 1 0 

7.12.2 [UJ Approval Requirements to Close ..... 7-1 1 

7.13 (U) Other Program Specific Investigative Requirements,..,., ,„.7- 1 1 


S (U) Enterprise Investigations (EIJ . .... 8-1 

fl. 1 (If) Overview — — -- , _ 8- 1 

8.2 (UJ Purpose, Scope and Definitions. __ ., ...... ........ 8-1 

8.3 (IF] Civil Liberties and Privacy 8-2 

8.4 (U) Predication ..~, ... _ ..... 8-3 

B. 5 (U J Standards fo r Opening or Approving a n Enterprise investigation ............ 8-4 

8.6 (UJ Opening Documentation, Effective Date, Approval, Notice, and File Review _ B-4 

S-6. 1 (U J Openi ng Documentation ..... ...... 8 -4 

8.6.2 (UJ Effective Date ., .. 8-4 

8.6.3 (UJ Approval Requirements for Opening an Enterprise Investigation.,.^^., ,,.,.,..,..,....8-5 

8.6.3. 1 (U) E I 0 pened by a Field Office with Section Chief Approval 8-5 

8.6. 3.2 (U) El Opened by FBI HQ with Section Chief Approval,...,-.,, 8-5 

8*6. 3,3 (U) SIM El Opened by a Field Office with Special Agent in Charge and Section 

Chief Approval - . - ...... 8-5 

8.6. 3. 4 (U) SIM El Opened by FBI HQ with Section Chief Approval ... -....,....-.8-5 

8.6.4 (U ] N otke Requi rements ....... ,...- 8 -6 

8.6.5 (UJ File Review , 8-6 

8.7 (U) Auth orized Investigative M ethods in an Ente rprise I nvestigation B- 7 

8.8 (U) Sensitive Investigative Matters (SIM) in Enterprise Investigations . 8-7 

8.8. 1 (UJ S I M Categories i n E n terp ris e investigations,.- -,.- — 8- 7 

8.8.2 (U) Academic nexus in Enterprise Investigations ,-. — — 8-7 

8.9 (U) Intelligence Collection [i.e^ Incidental Collection)...— ,— 8-8 

8.10 (U) Stan dards for Appro vi ng the Closing of an Enterprise I nvestigation - -. 8-8 

8. 1 0. 1 (U) Standards - - - - - 8-8 

8.10.2 (U) Approval Requirements to Close 8-9 


IX 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Version UaUsd: 
Ortoocr 15.201 1 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 

8.1 1 [U) Other Program Specific Investigative Requlmnents 8-9 

9 ( U } Fo reign I ntelligence , 9- 1 

9.1 [U) Overview __ ., __ 9-1 

9.2 [U) Purpose an d Scope ■ , ■ : . ■ ; . , ■„ 9-2 

9.3 (U) Civil Liberties and Privacy ... - ., 9-3 

9.4 [U) Legal Authority..... „ 9-4 

9.5 [U) General Requirements and FBIHQ Standards for Approving the Opening of Positive 

Foreign Intelligence Investigations .......... ...... ........... ...... 9-4 

9.6 [U) Opening Documentation, Approval, Effective Date, and File Review.^ 9-5 

9.7 [U) Standards for Opening or Approving the Use of an Authorized Investigative Method 

in a Full Positive Foreign Intelligence Investigation ............ 9-8 

9.S [U) Authorized Investigative Methods in a Full Positive Foreign Intelligence 

I lives tigation ....... 9-8 

9.9 [U) Investigative Methods Not Authorized During A Full Positive Foreign Intelligence 

Investigation ....... .................... ....... 9-9 

9.10 [U) Sensitive Investigative Matters [SIM) in a Full Positive Foreign Intelligence 

In ves tigation .. , ...... ., ^ 9- 10 

9.11 (U) Reten tion of I nformati _ 1 1 

9.12 [U//FOLTO] Standards for Approving the Closing of a Full Positive Foreign Intelligence 

9.13 [U) Other Program Specific In vesti ga tion Requ ire me nts .... ., .......... .^.....9- 12 


10(U//F0UO) Sensitive Investigative Matter (SIM) and Sensitive Operations 

Review Committee (SORC) 10-1 

10, 1 f U ) Sensitive I n vestigati ve Matters (SIM) ., ., 10-1 

10.1. 1 [U) Overview .. . 10-1 

10. 1.2 [D ) Purpose, Scope, a nd Definitio ns ............. .. _ 10-1 

10.1.2.1 (IT] Definition of Sensitive Investigative Matters [SIM)^. .. 10-1 

10.1.2.2 (U] Definitions/ Descriptions of SIM Officials and Entities..., 10-1 

10.1.3 [U) Factors to Consider When Opening or Approving an Investigative Activity 

Involving a SIM,^, __ 10-4 

10.1.4 [0) Opening Documentation, Approval, Notice, and Change in SIM Status.^,..,.,.,,..,...., 10 -4 

1 0.1 .4.1 (U} Review a nd Approval a f S I M Assess ments By A Field Office.... .. „ 1 0-4 

10.1 .4.2 (U) Notice for S t M Assessments by a Fi eld Office ..... 10- 5 

1 0. 1 .4.3 (U] Revi e w and Approval of S I M Predi cated 1 nvestigation s by a Fiel d Office 10- 5 


Version EJateif- 
October 15,21111 


UNCLASSIFIED -FOR OFFICIAL USE ONLY 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 

10.1.4.4 (UJ Notice for SIM Predicated Investigations by a Field Office . .10-6 

1 0. 1 .4.5 (U ] Review a nd Approval of S I M Assess ments Opened by FB I HQ 10-6 

10.1.4.6 (U] Notice Requirements for SEM Assessments by FBI HQ _^_10-7 

10.1.4.7 (UJ Notice forSiM Predicated investigations by FB1HQ ., .,.10-0 

1 0. 1.4. 0 (U ) Cb ange in SIM Status ....... ....... 10-0 

10.1.4.9 (U] Closing SEM investigations ...„.l0-9 

10.1. 5 (IE) Distinction Between SIM and Sensitive Circumstance in Undercover 
Operations,...., _____ __ .— _ 10- 10 

10.1.6 (U) Distinction Between SIM and Sensitive Undisclosed Participation..,,, 10- 10 

1 0. 1.6.1 (U) Scenarios,. ___ ... 10-11 

10,2 (U / /FQUQ ) Sensitive Operations Review Committee . ., ___ .,._. 10-11 

10.2. 1 (TJ) Membership and Staffing,, _ _ _ .__ 10-11 

10.2.2 (TJ) Fu nctiorL,,.,.,,^,,,.. ...... __ _ *___ _.., _ 10-12 

1 0.2.3 [ U ) Review and Recoin mendation _ ____ MM2 

10.2 .3. 1 (U) Factors to Co nside r for Review and Retorn mendation ., ., 10-13 

10.2.3.2 (U) Process for Review and Recommendation — . ____ __ ..10-13 

1 0.2.4 (U ] E mergency Authorization __________ _ 10-15 

10.2.4,1 (U) Notice/Overs Lght Function of SORC.,._ __ 10-15 

10.2.5 (U ) Logistics. 10-16 


1 1(U) Liaison Activities and Tripwires... 

ll.l (U ] Overview „. ___ ., 

112 (U3 Purpose and Scope _. ., 

113 (U 3 Appro va I Req ui rements for Liaison and Tripwires.... 

1 1,4 [U ] Do cum entntion fit Record s Rete ntion Requirements , 


11-1 

11-1 

, 11-1 

. 11-1 

1 1-2 


1Z{0) Assistance to Other Agencies.. 12-1 

12,1 (IT) Overview ____ __________ _ 12-1 

122 (If) Purpose and Scope _ ... ........ 12-1 

12.2.1 (U ] I nvestiga live Assi stance ____ ___ ........ 12-1 

1 2.2 .2 (U ] Technical Assista nee ^ . 12-2 

12.3 (U3 Investigative Assistance to Other Agencies - Standards, Approvals and Notice 

Requi rements _ _ ........ _ 12-2 

1 2.3, 1 [ U ) Standards for Pro vid ing I nvestigati ve Assistance to Other Agencies . 1 2 -2 


xi 

UNCLASSIFIED- FOR OFFICIAL USE ONLY 


Version Dated. 
October 15. 20 3 E 



I ^CLASSIFIED- FOR OFFICIAL USE ONLY 
Domestic Investigation and Operations Guide 


12.3.2 (U) Authority. Approval and Notice Requirements for Providing investigative 

Assistance to Other Agencies ■ ■ — % ■ ...12-3 

12.3.2.1 (U) Investigative Assistance to United States Intelligence Community (US tC) 

12.32.2 (U] Investigative Assistance to Other United States Federal Agencies 12-4 

12.3.2.3 (U) Investigative Assistance to State. Local and Tribal Agencies.. ......12-6 

12.3.2.4 (U] Investigative Assistance to Foreign Agencies ....... ... 12-1!) 

12.4 (U] T echn ical Assistance to Other Agen ties - Standa rds. Approvals and Noti ce 

Req uire ments ........ .. .. — 12-1 2 

12.4.1 [UJ Authority _ _ „ 12-13 

12.42 (U) Approval Requirements .... .. .... . 12-13 

12.4.2.1 (U) Technical Assistance to USIC Agencies . .. 12-13 

12.4.2.2 (U) Technical Ass is tance to Federal. State. Local and Tribal [Domestic] Agencies 

Regarding Electronic Surveillance. Equipment, and Facilities .. ^..12-13 

12.4.2.3 [U] Technical Assistance to Federal. State, Local and Tribal (Domestic] Agencies 

Involving Equipment or Technologies Other than Electronic Surveillance 
Equipment ........ .. .......... 12-14 

12.4.2.4 (U J Technical Assistance to Foreign Agencies ......... ........ ..... 12-15 

12.5 (U) Documentation Requirements for Investigative or Technical Assistance to Other 

Agencies ..... ..... __ 12-16 

12.5, 1 (LI] Documentation Requirements in General. ........ 12-16 

12.5.2 (U] Documentation Requirements for Investigative Assistance (including Expert 

Assistance] to Other Agencies (Domestic or Foreign] ...12-16 

12.5.3 (U) Documentation Req uirements fo r T echnical Assista n ce to Other Agencies 

(Domestic or Foreign) ..... — 12- 17 

12.6 (U) Dissemination of Information to Other Agencies - Documentation Requirements.... 12- 17 

12.7 [U] Records Retention Requirements... ........ ..... — . 12- 18 

12.7.1 [ U) Use of the FD-999 . - 12-10 

1 2.7.2 ( D) U pi oa d i ng the FD-999..^. ... 12-10 

12.7.3 [U] Request (brFD-999 Exemption. rr ^ .. .12-10 

12.7.4 (U//FOUO) 343 File Classification - Domestic Police Cooperation Files..... 12-19 

12.7.5 (U//FOUO) 163 FileClassifEcation - Foreign Police Cooperation Files.... .-^— 12-19 

13(U) Extraterritorial Provisions ........... _13-1 

13. 1 (U) Overview .--- — — — 13-1 

1 3.2 (U) Purpose and Scope , ______ _ ..... ___ 13- 1 

13.3 [U] Joint Venture Doctrine., ... _ .................. _,..l3-2 


Vir5km Dated: 
October 15 r ZCll 


xil 

UNCLASSIFIED- FOR OFFICIAL USE ONLY 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 

13,4 (Lf) Legal Attache Program,.. . . ...... ....... . . . 13-2 

14(U) Retention and Sharing of Information 14-1 

14.1 (U) Purpose and Scope - .... .... . . 14-1 

14.2 (U) The FBI 's Records Retenlio n Plan* and D ocum entation . .. 14- 1 

14.2.1 { U] Database or Records System ... .. ___ . 1 4-2 

14.2.2 fU] Records Management Division Disposition Plan and Retention Schedules.,,.,...,..,.! 4-2 

14.3 (IT) Information Sharing .. . . .. ....... .. ..............14-2 

14.3.1 [U) Permissive Sharing....... .... ,......,. ,. . .14-2 

14.3.2 [U] Required Sharing..... . . ......... .,..., _ 14-3 

14.4 f U) Information Related to Criminal Matters ... ....... ... .,..14-3 

14.4.1 [U) Coordinating with Prosecutors .^...... . . 14-3 

14.4.2 {U) Criminal Matters Outside FBI Jurisdiction..... 14-4 

1 4.4.3 [ LQ Reporting C rim inal Activity of a n F BI Employee or CH S ..... ..... 1 4-4 

14.5 [UJ Information Related to National Security and Foreign Intelligence Matters... ......14-4 

14.5.1 [U] Department of Justice. .. 14-5 

14.5.2 [UJ The White House .. .,.., .. 1 4-6 

14.5.3 [IT] Congress . .......14-7 

14.6 (U) Special Statutory Requirements. ... . .... . — — ..... ...14-7 

14.7 [U) Threat To Life - Dissemination Of I nformation ..... 14-8 

1 4.7.1 [ U) Overview 1 4 -8 

14.7.2 (U//FGUO) Information Received through FISA Surveillance...... 14-8 

14.7.3 (U) Dissemination of Information Concerning Threats against Intended Victims 

[ Persons).. ............ .... 1 4-B 

14.7.4 [D//FOUO] Dissemination o f In formation Concerning Threats, Possible Violence or 
Demonstrations Against Foreign Establishments or Officials in the United States., 14-11 

14.7.5 fU) Dissemination of Information Concerning Threats against the President and 

Other Designated Officials 14-11 

lS(Li) Intelligence Analysts and Planning . 1S--1 

15.1 (U) Overview ......15-1 

152 (U) Purpose and Scope .... ..... ................ .. _ 1 5- 1 

15,2.1 (U) Functions Authorized. ............. ... 15-1 

1 5.22 ( U] I n tegra tio n of Intel ligen ce Activities ......1 5 -2 


xhl 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Version Oatod. 
October 1 5, 201 1 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic investigations and Operations Guide 

1 5.2,3 [ U ] Anal ysis and Planning Not Requi ri rg the Opening a f a n Assessm ent (See Dl OG 


Section 5)- __ _ - — - .15-2 

15.3 [U] Civil Liberties and Privacy _________ ___ ........ —.—.,..15-2 

15.4 fUl Legal Authority. - - — ____. - _ ________ 15-2 

155 (LI] Intelligence Analysis and Planning - Requiring a Type 4 Assessment,—.—.— _______ 15-3 

15.6 [U] Authorized Activities in Intelligence Analysis and Planning... . _____ .15-3 

15.6.1 [U] Strategic Intelligence Analysis. — _____ - _____ - -15-3 


l£j(U) Undisclosed Participation (UDP) 16-1 

1 6. 1 (U] Overview . , >___ - _ , 16-1 

16.1.1 (U) Authorities. _ _____ 16-1 

16.12 [U1 M itigation of Risk _ - . 16-2 

16.0 (0} Sensitive UDP defined _ — 16-2 

16,1.4 ( U ] Non-sensitive U OP defined.-.— ........... — - 16-2 

16,15 (U]Type of Activity - — — 16-2 

16.2 (U) Purpose. Scope, and Definitions... — - 16 2 

16.2.1 [U] Organization-.—.- — - , , -.-.16-2 

1 6.2.2 (If ] Legitimate Organizati on _____ — — 16-3 

1 6.2.3 (U] Panic ipatlon - — — „- r — ■ — - — 16 -3 

1 6.2.3. 1 (U] Undisclosed Participation—.—. — _ 16 -4 

1 6.2 . 3.2 (U //FOUO ) Influencing the Activities of the Organization — — . 1 6-5 

16.2.3.3 (U//FOUO] Influencing tiie exercise of First Amendment rights — 16-5 

16.2.3.4 (U] Appropriate Official _______ — 16-5 

16.2.3.5 [U] Sensitive Undisclosed Participation.— - 16-5 

16.2.3.6 (U) Already a Member of the Organization or a Participant in its Activities .16-6 

16.3 (U) Requirements for Approval — — — — 16-6 

1 6.3. 1 ( U 1 General Requirements - — -. 16-6 

16.3. LI {If] lin derco ver Activi ty _ — — 16-6 

16.3. 1.2 (U] Concurren E Approval ,. — — — 1 6-6 

1 6.3. 1.3 (U j Delegati on and "Acting” Status — 1 6-7 

16.3.1.4 (U) Specific Requirements for General Undisclosed Participation f Non-sensitive 

UDP] 16 7 


16.3,1.5 fU] Specific Requirements for Sensitive Undisclosed Participation (Sensitive 

UDP] - - _____ 16-8 

16.4 (U] Supervisory Approval Not Required,..,-.—.—.- 16-9 

1 6.5 [U] Standards for Review a nd Approval — — 16- 10 


itiv 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Vereiun Dated; 
October 15,2-011 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


16.6 (U) Requests for Approval of Undisclosed Participation , . .. ..... 16-10 

16.7 (U) Duration _ ___ ^ ... 16-11 

16.8 ( U/ /FOUO) Sensitive Operations Review Comm ittee [SO RC) ........ 16-12 

1 6.8. 1 (U/ /FOUO) SO RC Notification _ . 16-12 

1 6.8.2 (U/ /FOUO} SO RC Review .... 16-12 

16.9 [U) FBI HQ Approval Process ofUDP Requests...... . ... ........ .. _ .16-12 

16.9.1 (U) Submitting the UDP request to FBIHQ_ .......... 16- 12 

1 6.9.2 (U//FOUO) Assessments - CHSs tasked to |oin sensitive organizations and obtain 

insider information ...... ......... ..... . 1 6- 13 

16.93 [U//FGUG) Predicated Investigations - UDP Requests intended to or which may 
influence the activities of an organization or the exercise of First Amendment 
rights by its members ...... .... ...... ......... ........ ...... 16-13 

16.9.4 [U//FQU0]i Procedures for approving emergency UDP requests that otherwise 

require FBIHQ approval ............ . .... ....— 16-14 

16.10 [U) UDP Examples. , : ......16-15 


I7(U) Otherwise Illegal Activity (QIA) 17-1 

1 7. 1 (U) Overview ............. ........ .. _ .... ..... 17-1 

1 7.2 ( U ) Purpose and Scope .. . . ...... . 17-1 

17 3 [ U //FOUO) 0 1 A in Undercover Activity __ 1 7- 1 

17.4 (U//F0UG] 0^ by a Confidential Human Source (CHS) ....... 17-2 

17.5 [U//F0U0) Approval ofOEA by a Special Agent in Charge (SAC) - Not including 

material Support of Terrorism..... .... .... 17-2 

17.6 [U//FQUQ) OEA Related to Material Support of Terrorism in National Security 

Invest] gatio ns ....... - ....... „. ... ... 17-4 

17.7 [ U // FOUO) Standards for Review and Appro va 1 of 01 A..... ... 17-4 

1 7.8 [UJ 01 A not authorized .... ....... ..... _ 17-4 

1 7.9 [U] Emergency Si tuatio ns ........... .... .. .......... 1 7-5 


1 B{U) Investigative Methods......... lfl-1 

18.1 (U) Overview ................. ...... ......... .. 18-1 

18.1.1 (U ) 1 n vestigati ve M ethods Listed by Su b-Sectm n N umber ..... .. 18 - 1 

18.1.2 (U) Investigative Methods Listed by Name [Alphabetized) ... ... ..... ...18-2 

18.1.3 (U) General Overview .... 1 8-3 

1B.2 [U) Least Intrusive Method ... ............18 3 


xv 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Vernon. Dated. 
October 15. 2011 



:l: . A.thcnzed Investigative Methods in Assessments ..... . __ ,13-5 

IS-5L1 [U] Investigative Method: Public Information ["Publicly Available 

Information 1 '] .. ... ' ■ . 18-7 

1 8.5. 1 J f U ) Scd pe ....... „. ... 1 8-7 

13.5.1.2 f U) Application .... .. ........... . ... ........ 13-8 

18 5.1.3 (U) Approval „ — _ 18-8 

18.5.1.3.1 (U//FQUO) Special Rules: “Special Rule for Religious Services" and "Special 

Rule for Other Sensitive Organizab □ ns" ......................... _ ....... 1 8-8 

13.5.1.4 (U) Use/ Dissemination. . ..... .... . ..... IS -8 


18.5,2 (U) Investigative Method: Records or Information - FBJ and Department of 


pustice [»0|)..„ 18-9 

1 a 5.2.1 (U) Scope _ ..... , .... 18-9 

1 a 5,2.2 ( U ) Application — - 13-9 

1 8. 5.2.3 (U ) Approval . ■. 18-9 

IS. 5,2 .4 [ U ) Pattern -Based Da ta M in mg... ... ... 18-9 

13,5.2.5 [U] Use/ Dissemination _.. „ 18-10 


18.5.3 (U) Investigative Method: Records or Information - Other Federal, State, 


Local, Tribal, or Foreign Government Agency _ 18-11 

1B.5.3, 1 (U) Scope _ 18-11 

18.5.3.2 (U) Application . 18-11 

18.5,3.4 [LT] Use/ Dissemination.. — — , — 18-12 

18.5.4 (U) Investigative Method: On-Line Services and Resources... 18-13 

18.5. 4.1 [U] Scope . - 18-13 

1 B.5.4.2 [U ) Application .... 18-13 

18.5.4.3 [U] Approval ............... . 18-13 

1 8. 5.4.4 ( U ) Use/ Dissem ination .... ............. 1 8- 1 3 

18.5.5 f U) Investigative Method: CHS Use and Recruitment 18-15 

18.5.5.1 [U] Scope . ■- M ... ........ ....... 18-15 

18.5.5.2 [U] Application . __ 18-15 

18.5.5.3 [U] Approvals ...... .... ... ..... ........ 18-15 

1 8.5.5. 4 [U] Use/Dissem ination ........... 18-17 

18.5.6 (LT) Investigative Method: Interview or Request Information from the Public 

or Private Entities... 18-19 

1 8. 5.6.1 [ U ) Scope 18-19 


Version Ditpd j 
□ember IS. 201 


xvi 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 





^CLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


1 8J fll) Particu lar Investigative Methods ■ . ■ ■ — ... — . — 18-4 

18.3A (U) Use of Criminal Investigative Methods in National Security Investigations.— .—.13-4 

1 8.4 ( U ) I nformation □ r Evidence C btai n ed in Assessments and! Predicated In vestigatio n s 1 8-4 

18.5 (If] Authorized Investiptive Methods in Assessments., ,.18-5 

18,5.1 (U) Investigative Method: Public Information ('Publicly Available 

Information”) 18-7 

18.5.1.1 (U) Sco pe — — — — 1 8 -7 

18.5.1.2 (U) Application - — .- _ - — — -. 1 8-8 

1 8, 5. L3 (U) Appro va I - — ... — 18-8 


18.5,1.3.1 (U//FOUO) Special Rules: "Special Rule for Religious Services" and 'Special 


Rule for Other Sensitive Organizations - ——..18-8 

18.5.1.4 ( U ) Use/ Dissemination,. - — . ..... — -, — . -. 1 8 -8 

16.5.2 { U } In vestigati ve Method: Records or 1 n forma lio n - FB I and Depart m ent of 

Justice fDOJ) . _ - 18-9 

18.5 2.1 fU) Scope „ - -,18-9 

1 8,5, 2. 2 [ U) Appl i cation — . — - — — .-.. 1 8-9 

1 S.5.2.3 { U ) Approval — ■■->,, ,-,- TT *- r — T . H . rTT . r - TTTr — V . T . — ^^,_ r — ^ - lfl-9 

18.5.2.4 (U) Pattern-Based Data Mining.,.—.-,—,-.-.—.- .--..16 9 

18.5. 2. 5 (U) Use/ Dissemination— - — - -.—..18-10 

18.5.3 {If) Investigative Method: Records or Information - Other FederaL State, 

Local, Tribal or Foreign Government Agency...,,.....— 18-11 

18.5.3.1 [U] Scope- - 18-11 

18.5.3.2 (11) Application- .., .., . — ,.18-11 

18.5,3.4 (Lf) Use/ Dissemination. — — 18-12 

18.5.4 (U) Investigative Method: On-Line Services and Resources..— .18-13 

1 8. 5.4. 1 (U) Scope — — ....... — — 18-13 

1 8. 5.4.2 ( U) Application , 18- 13 

1 8. 5.4.3 [ U] Appro va I - - 18- 13 

1 S.5.4.4 (IT) Use/Di ssemi nation — — — 18- 13 

18. 5.5 f If) I n ve stigati ve M ethod : CMS U se an d Recruitment 18-15 

1 8. 5.5. 1 f U ) Scope - -. . - - - 18-1 5 

18.5.5.2 (U) Application.,.—.——. — — 18-15 

18.5.5.3 (Lf) Approvals.—. - — - — — - —.18-15 

18.5.5.4 (□) Use/Di ssemi nation— — - 18-17 

13.5.6 [U] Investigative Method: Interview or Request I nformation from the Public 

or Private Entities. ....... ...... 18-19 

1 8.5.6. 1 (U) Scope - ,.., - — — 18- 19 


Version Djierf- 
□trotoer 15.2011 


xvi 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 

18.5.6.2 (U) ^ . 18- 19 

1 8.5. 6.3 (U> Vol u ntariness... , — 1 8- 19 

18.5.6.4 fLT] Approval / Procedures ...,.,. , ___ ., 18-20 

18.5.6.4.1 {UJ Custodial Interviews, .... „ ....... 18-20 

18.5.6.4.2 (U//FQU0) Miranda Warning for Suspects in Custody Overseas 18-23 

18.5.6.4.3 [U] Constitutional Rights to Silence and Counsel under Miranda-.,..,.,.........,..... 18-23 

1 8.5. 6.4.4 [U] Sixth Amend ment Right to CounseL. .. ... 18-24 

18.5.6.4.5 (U] Contact with Represented Persons..,.., ..... .18-25 

18.5.6,46 (U) Members of the United States Congress and their Sta fis. — — —18-25 

1 8.5.6.4.7 [U] White House Personnel 18-25 

18.5.6.4.8 £U] Members of the News Media ....... . 18-26 

18.5.6.4.9 [U] During an Assessment - Requesting Information without Revealing FBI 

Affiliation or the True Purpose of a Request....,,.. ., 18-27 

18,5.64.10 (U) Consultation and Discussion.™.,.^ 18-28 

18. 5.6.4. 11 (Uj Exam pies ., , , , 18-28 

18.5.6.4.12 (U//FOUO) Predicated Investigations - Requesting information without 

Revealing FBI Affiliation or the True Purpose of a Request ______ 18-31 

1 0. 5.6.4. 13 (U) I nterviews of | uveniles 18-3 1 

18.5.6.4.14 fLT) I nterviews of Juveniles After Arrest,...™. . . . .. 18-32 

18. 5.6.4. 1 5 ( U} Documentation .™ ™™ ...........™.™ 18-33 

1 8 5.6,4. 16 (IT) Electro nic Reco rdi ng of Interviews,......, _ ... ...... 1 8-34 

18.5.6.4.17 (li) Interviews Relating to Closed Files™ .™.™ ™™™,.™.™. .... 18-35 

18. 5.6. 4. 18 (Lf) FBI HQ Operationa I Division Req ui rements ™... ™ . , 1 8-35 

18.5.6.5 (U) Use/Dissemination .. ____ . - 1 8^34 

18.5.7 (UI Investigative Method: Information Voluntarily Provided by 

Governmental or Private Entities™ 18-37 

1 8.5.7. 1 (I!) Scope .... „ ,™, — 1 8- 37 

1 8.5.7. 2 fTJll Application ™,.........™.... ...,......™ — — ...„..™..™ 18-37 

1 8. 5.7.3 fU) Approval . _ . 1 B-37 

1 8. 5.7.4 (U) U se/ Dissemination ...... _.. .............. ... .. 1 8-37 

18.5.8 (U) investigative Method: Physical Surveillance foot requiring a court orderl 18-39 

18. 5.8. 1 (U) Scope - 1 8-39 

18.5.8.2 (U) Application.......... ....... ..™.™.™.™,™.. . _ .™...™ ™ 18-40 

18.5.8.3 [U] Approval _ 18-40 

18,5.8,3.1 (LT//FQU0] Standards for Opening or Approving Physical Surveillance 

During an Assessment ..... ... ............ .. .™ .18-40 

1 8.5 B.3.2 (U//FOUO) 7 2- Hour Pe riod for Assessments . 1 8-40 

18.5j 8.3,3 (U//FOUO} Mobile Surveillance Team (MET) or Mobile Surveillance Team - 

Armed (MST-A] ■-■■■■■. . — 10-*1 

18.5.8,3.4 (U) Aviation Resources,..,., ...,™™™.™,...™.„. .... ..™ ... 18-41 


xvii 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Version Dated: 
October 15.2011 


- V- LasSIFIED - FOR OFFICIAL LSH ONLY 
Domestic Investigations and Operations Guide 


|e_S i 4 pi) Other Ph ys tea I Survei Lla n ce — _ ___ 

1? : zS (til Maintain a “Surveillance Log" during Physical Surveillance.., — 

18,5 B, 6 (0) Use/Dissemination— _ __i; 

tS-j. £ (U) Investigative Method: Grand |ury Subpoenas - for telephone or electronic 

mail subscriber information only {in Type 1 & 2 Assessments) 1 


1 0.5.9. 1 (U) Scope — . 1 1 • - 

IB, 5.9.2 (U) Application.,.,..,.,..,.. _ „ — IB- 

10.5.9.3 (U) Approval — — „ — IB- 

18.5.9.4 (U) Electronic Communications Privacy Act [ECPA] (18 U.S.C, §§ 2701-27 1 2] ,^1H 

1 8. 5.9.5 (U ) Use/ Dissemination _ ... 1 8- -- 

1 8.6 (U] Authorized 1 n vestigati ve M ethods i n Pre timina ry I nvestigatiflns..,. 1 8— " 

18.6.1 (U) Investigative Method: Consensual Monitoring of Communications, 

including Electronic Comm uni cations..... 13-49 

10.6.1.1 (U) Summary...— _ 18-4^ 

I B.6, 1 .2 f U ) Appliratioin - 18-4 V 

1 0.6. 1 .3 f L)) Legal Authority—.™ ____ . __ ____ ... 10-49 

1 0.6. 1 .4 [ IT) Defi nition of I n ves tigati ve Method — „ 1 S- 49 

18.6.1.5 (U) Standards and Approval Requirements for Consensual Mcmttnrl ng--,— 10-51 

1 8.6. 1.5. 1 (fJ ) General Approval Requi rem ents __ _ . „ 1 8-5 1 

10.6.1.6 (U) Consensual Monitoring Situations Requiring Additional Approval...,-.,.........- 18-53 

18.6.1.6.1 (U) Party Located Outside the United States-...,. — — 18-53 

18.6.1.6.2 (U) Consent of More than One Party Required for Consensual Monitoring...,. 18-54 

1 8.6. 1.6. 3 (U) Sensitive Monito ring Circumstance - 18-54 

18.6.1.7 (U) Duration of Approval— — „ — _ 18-57 

18.6.1.8 (U) Specific Procedures...,,.,..,...,..,.— — — —.10-57 

1 8.6. 1.8. 1 ( U ) Docume nti ng Consent to Monito r/RecortL— . ____ — 1 0-57 

18.6.1.8.2 (U) Documenting Approval ...... — .._ ... 10-50 

18.6.1.8.3 [U) Retention of Consensuatly Monitored Communications 13-58 

18.6.1.8.4 (U) Multiple Communications— — — — ... — 18-58 

18.6.1.8.5 (U ) Investigation Specific Approval — — _ _ — . 18-5 8 

18.6.1.9 fUJ Compliance and Monitoring—...— — — — .— .18-SB 


18.6.2 (U) Investigative Method: Intercepting the Communications of a Computer 

T respasser 18-59 

1 8.6.2. 1 (IF) Su mmary. — - 1 0-59 

1 8.6. 2.2 (U) Application,— ___ 1 B-59 

18.6.2.3 (IT) Legal Authority.......,—,. — .... 10-59 

1 S.6.2,4 (U) Defi nition o f the Com munications of a Comp uter T respasser . 1 0-59 


Version De Ecd : 
October 15,2011 


xviii 

L’N CLASS I FI HD - FOR OFFICIAL USE ONLY 



SCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


1B-5J14 [U} Other Physical Surveillances ..... ... .. ,.. - . 18-43 

IHLSuES (XJ> Maintain a "Surveillance Log" during Physical Surveillance ... . 18-43 

IRS.0,6 (U) I Jsf/niimBfn inatinn — .— — — — _ ......18-43 


18.5.9 (U) Investigative Method: Grand Jury Subpoenas - for telephone or electronic 

mail subscriber information only [in Type 1 & 2 Assessments] 18-45 

18.5.9.1 [U) Scope ..... ...... . 18-45 

18.519.2 (U) Application . .. . 18-45 

18.5.9.3 [U) Approval ,. . 18-45 

18.5.9.4 (U) Electronic Communications Privacy Act (ECPA) [ 18 U.S.C, §§ 2701-27 12),.. 18-45 

18.5.9.5 (U) Use/Dissemination .. .18-46 

1 8.6 [U) Authorized I n vesbgati ve Me thods i n P rel iminary Investigations ... 18-47 

18.6.1 (U) Investigative Method: Consensual Monitoring of Communications, 

including Electronic Communications 

18.6,1.1 (If) Summary .... 


18-49 

18-49 
18-49 
. 18-49 


18.6.1.2 (U) Application,,....,..,-,...,,...,...... 

18.6.1.3 (U] Legal Authority, 

18.6.1.4 (U) Definition of Investigative Method ........... ... ......... ...... ....... 18-49 

18.6.1.5 (U) Standards and Approval Requirements for Consensual Monitoring.............. 18-51 

18.6.1.5.1 f U ] General Appro va l Req uirements ... ............ ^ ........... 1 8-5 1 

18.6.1.6 (U) Consensual Monitoring Situations Requiring Additional Approval. ...18-53 

18.6. 1.6.1 fU) Party Located Outside the United States,,., 18-53 

18.6.1.6.2 (U) Consent of More than One Party Required for Consensual Monitoring 18-54 

18.6.1.6.3 (U) Sensitive Monitoring Circumstance....^ 18-54 

18.6.1.7 (U) Duration of Approval. .. .... .. ... 18-57 

18.6.1.8 (U) Specific Procedures... ... .................. . ...18-57 

18.6. 1.8. 1 (U) Documenting Consent to M onitor/ Record.,...,. ... 18-57 

1 8.6. 1.8.2 f U] Documenting Approval ...... .. 1 B-S B 

18.6.1.8.3 [LI) Retention of Consensually Monitored Communications .... ......18-58 

18.6. 1.8.4 fll j Multi pie Com mun ications ... 1 8-58 

18.6. 1.8. 5 [U ) I n vestigation Sped lie Approval 1 8-58 

18.6.1.9 (U) Compliance and Monitoring ... ...18-58 


18.6.2 (U) Investigative Method; Intercepting the Communications of a Computer 


1 8.6.2. 1 [U) Summary.. ...... ..... .. 18-59 

1 8. 6 . 2.2 f U) Application ........... , „ ..... ......... 18-59 

18.6.2.3 (U) Legal Authority...... ...................... ,...._ .... 16-59 


1 8.6. 2.4 (U) Defi niti on of the Commu n ications of a Computer T respasse r 1 6-59 


Version Sated;. 
October 15,2011 


atwiii 

UNCLASSIFIED -FOR OFFICIAL USE ONLY 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


1 3. 6-. 2.5 (11/ /FQU 0] Use and Approval Req u L cements For I ntercepti n g the 

Comm u n [cations □ f a Com pu ter Trespasser^ . 1 8- & 1 

18.6.2.5.1 (U) General Approval Requirements — „ 18-61 

18.6.2.6 (IT] Duration of Approval for Intercepting the Communications nfa Computer 

1 8.6.2.7 (U) Specific Procedu res for J nteccepting th e Commu n Leadens of a Com puter 

T respasser . „„ 18-63 

18.6.2.7.1 (U) Documenting Authorization to Intercept .„™ „ 18-63 

1 8.6.2.7.2 (U) Acquiring Only the T respasse r Comm u n icati on s. „ 18-63 

16.6.2.7.3 (U) Reviewing the Accuracy of the Interception „ „.„..~,..,..,.l8-64 

16.6. 2.7.4 ( U ) Revie wi ng the Relevancy of the I ntercepti on 18-64 

16.6.2.7.5 ( U ) Du ration of App rovsL_ „ „ 1 6-65 

16.6.2.7.6 ( U J E LSLTR Req uirem ents „ „ „ — 1 6-65 

18.6.2.7.7 (U) Multiple Communications — „. 16-65 

1 6.6.2 .7.8 (U ) I n vestigation Specific Approval „ 1 6-65 

16.6.2.8 (U) Compliance and Monitoring _ — 18-65 

18.6.3 (U) Investigative Method: Closed-Circuit Television /Video Surveillance, 

Direction Finders, and other Monitoring Devices 18-67 

18,6.3.1 (U) Summary. „ ___ 16-67 

1 B.6, 3,2 (U) Appli cation..,., . - — - 1 8-67 

16.6.3.3 (U) Legal Authority... „ „ 1 8-67 

16.6.3.4 (U) Definition of I nvestigpti ve Method 18 67 

16.6.3.5 (U//FOUG) Standards for Use and Approval Requirements for Investigative 

16.6.3.6 (U) Du ration of Approval „ _ „ 1 8-68 

16.6.3.7 (U) Sperific Procedures __ „ 18-68 

16.6.3.8 (U) CCTV/Ytdeo Surveillance where there is a Reasonable Expectation of 

Privacy in the area to be viewed or for the installation of the equipments.,..,.,,... 18-69 
1 S.6.3.9 £ 0 J Com pliance an d Mo n itoring ..... „ 1 8-69 


18.6.4 (U) Investigative Method: Administrative Subpoenas (compulsory process] 18-71 


18.6.4.1 [U] Overview of Compulsory Process 18-71 

16.6.4.2 (U) Application,..,,,,,,, ■■■•-- 18-71 

16.6.4.3 (U) Administrative Subpoenas __ 18-71 

1 B.6,4.3. 1 (U) Summary „. „ _ ............... 18-71 

1 8.6.4. 3.2 {U} Legal Authority an d D elegation , - — - 1 8-72 

1 8.6.4. 3 . 3 (U) App ro val Req uirem ents — „ 1 8-74 

1 8.6. 4.3 .4 (U) Limitations on Use of Admi n istrati ve Subpoenas 18-75 

1 8.6.4.3.5 (li) Com pEiance/Monitoring.,.,, 18-78 

18.6,5 (U) Investigative Method: Grand Jury Subpoenas (compulsory process) 16-81 


XIX 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Version Dated: 
October 15, 201 1 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 

10.6.5. 1 (If) Overview of Compulsory Process.—— - 18-8 1 

18.6.5.2 [ If) Application — —. - — . — .— — 1 8-8 1 

IS 6.5.3 (If) Federal Grand jury Subpoena * — — , 18-81 

1 8.6. 5.3.1 (IT) Legal Authorities - — .— — 1 8-8 1 

18.6.5.3.2 (U) Scope-.—.- - - — 18-82 

18 6,5.3.3 (LT] Approval Requirements.- 18-82 

1 8.65.3,4 (LT) Dura lion of Approval.-.,. — ... — ... -, - - - 1 8-82 

18.6.5.3.5 (U) Specific Procedures. — - .... — 18-82 

1 8.6. 5.3.6 (LT) Noti ce and Reporting Requi rements „ - - — 1 8-83 

18.6.5.3.7 (Lt) Grand jury Proceedings — Generally, — - ,18-83 

18.6. 6 (U) Investigative Method:: N atitinal Security Lette r ( compulsory proce $s) 18-93 

18.6.6. 1 { U) Overview of Com pu Isory Process __ - 1 8-93 

18.6.6.2 (If) Applicati on — r .-. — 18-93 

18.6.6.3 (U) National Security Letters 18-93 

18.6.6.3.1 (U) Legal Authority — . - 18-93 

1 8.6 6.3. 2 (U) De finition of Metho d, _ ..,- — ... 1 8-94 

1 86.6. 3. 3 (U) Approval Req uirements — — . .- 18-94 

18.6.6.3.4 (U) Standards for Issuing NSLs .- -, — _ 10-95 

18.6.6.3.5 (U) Special Procedures for Requesting Communication Subscriber 

Information _ - - - - -18-96 

18.6.6.3.6 (U) Duration of Approval. . — 18-96 

18.6.6.3.7 (U) Specific Procedures — -... ■' 18-96 

18.6.6.3.8 (U) Notice and Reporting Requirements — - 18- 100 

18.6.63.9 (U) Receipt of NSL Information -. -. — 18- 100 

1 8.6.63. 1 0 (U ) Electronic Service and Electron ic Retu ras of NSLs - 1 8- 10 2 

1 5.6.6.3 . 11 (U) Dissemination of NS L Ma terial— — - 18-103 

18.6.6.3.12 (If) Special Procedures for Handling Right to Financial Privacy Act 

Information - - - ,- 18-103 

18.6.6.3.13 (U) Payment for NSL-De rived Information-.-—.— — 18-104 

18.6.7 (U) Investigative Method: FISA Order for Business Records (compulsory 

process) 18-105 

1 8.6.7. 1 (U) Overview of Compu Isory Process. . , 18-105 

18.6.7.2 (U) Application..,— — 18- 105 


18.67.3 (U) Business Records Under FISA .... — — 18-105 

18.6.7.3.1 (U) Legal Authority, - — 18- 105 

18.6.7.3.2 (U) Defini tion of Method— - - „ - 18-105 

18.6.7.3.3 (U) Approval Requirements ....- ... 18-106 

1 8.6.7.3.4 (U) Duration of Court Appro val — — , 18-106 

18.6.7.3.5 (U) Notice and Reporting Requirements,— - - — 18- 106 

18.6.7.3.6 (U) Compliance Requirements 18-106 


Version Dutedj 
October IS. 201 1 


XX 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 



UNCLASSIFIED - FOR OFF IC1AL USE ONLY 
Domestic Investigations and Operations Guide 


18.6.7.3.7 fU) FISA Gvercol lection ___ _. ........ 10-106 

18.6.3 (U) Investigative Method: Stored Wine or Electronic Communications and 

Transactional Records 10-107 

1 8.6.8. 1 (U] Suramary^. _ _ _ ........... 18- 1 07 

18.6.3.2 (Lf } Application.... ........ .... _ .......... ..... 18- 1 07 

18.6.8.2.1 (U) Stored Data _ ... 18-107 

18.6.8.2.2 (U) Legal Process _____ _ _ ...... . . 18-108 

18.6 8.2.3 fU) Retrieval _____ _. _ 18-108 

1 8.6.8. 2.4 (U J Basic Subscriber I nfo rma ti on 18- 1 08 

LB.6.8.2.5 |U) Preservation of Stored Data 18-108 

LB.6.8.2.6 (U) Cost reimbursement ___________ _. — — — _ 18-1 OR 

1 B.6.8,3 (U] Legal Authority. ...... ... ___ 1 0- 1 OR 

18 6.8.4 (U] EC PA Disclosures 18-100 

18.6.8.4.1 £U] Definitions ------ _____ _____ 18-1 10 

1 8.6. 8.4.2 ( U ] Compelled Disclosure __ _____ __ 18- 1 1 0 

10.6.8.4.3 [ U ] Volu ntary Disclosure. ___ __________ 18- 116 

18.6.0. 5 (U) Voluntary Emergency Disclosure._._.__._.__._ _ ______ 18- 1 1R 

18.6.8.5.1 (U) Scope __ _ _ 18-1 1R 

18.6.8. 5.2 f U ] Du ratio n of Approval .__ 18-120 

18.6.8.5.3 (U ) Specific Procedures 18-120 

18.6.8.5.4 f U ) Cost Reimbursement 10-121 

10.6.0.5.5 (U] Notice and Reporting Requirements 18-121 

10.6.8.5.6 [U) Reporting Voluntary Emergency disclosures - - - 10-121 

1 0.6.8. 5.7 |U ) Roles/ Responsibilities 18-121 

18.6. 0. 6 [U) Other Applicable Policies 10-122 

18.6.9 fU) investigative Method: Pen Registers and Trap/Trace Devices {Pft/TTJ. 18-123 

1 6.6. R, 1 (IT] Summary _______ ______ 10-123 

15.6- R.2 (U] Application _... _____ 10-123 

1R6.R.3 fU) Legal Auttuirit y- — — - — ....... ________________ _______ 10-123 

18.6. R.4 |U) Definition of Investigative Method _ ■ ....... 10-123 

18.6.9.5 |U) Standards for Use and Approval Requirements for Invesbgative Method .. 10-123 

10.6-9.5- 1 | U ] Pen Register/Trap and Trace under FIS , 10- 1 23 

10.6,9.5.2 [U] Criminal Pen Regi ster/Trap and Trace under Title 18 _____ 10-125 

1 0.6. R.6 fU] Duration of A ppro val , 10-1 27 

10.6- 9.7 |U) Speci fir Procedures _____ _____ _..._ 18- 1 27 

1 8.6.90 (U) Use of FISA Derived I n Form ati □ n i n Other Proceedings__...__ ______ 1 8- 1 28 

1 8.6. R.R £U) Congressional Notice and Repo rti ng Requirements 18-128 

10.6.9.R.1 (U) Criminal Pen Register/Trap and Trace- Annual Report. 18-128 


xxi 

UNCLASSIF IED - FOR OFFICIAL USE ONLY 


Version Dated: 
October 15,201] 


UNCLASSIFIED - FOR OFFICIAL US F ONLY 
Domestic Investigations and Operations Guide 


18.6,9.9.2 (U) National Security Pen Registers and Trap and Trace -Semi-Annual...... IS- 129 


18.6.9. 10 [U) Post Cut-Through Dialed Digits [PCTDD) . .... 10- 129 

i 8.6, 9.10.1 (U) Overview _ _ „. ... .18-129 

1 8.6.9. 1 0.2 (U) Col lection □ f PCTDD .— 18- 1 30 

1 8.6.9. 1 0. 3 (U) Use of PCTDD... . IS- 1 30 

18.6.9.10.4 (U) What constitutes PCTDD content.. 10-13 1 

10.6.9.11 [U// FOLIO) Cell Site Sim ulators/Digita] Analyzers/Wireless Intercept Tracking 

Technology .......... ....... ........... ............ ... ...... 18-132 

1 8.6.9. 11.1 (U/ /FOU 0) To Locate a Known Phone N umber,... .................. 10-1 32 

18.6.9.11.2 (U//FOUQ) To Identify' an Unknown Target Phone Number 10-133 

1 8.6.9. 1 1.3 (U) PR /TT Order Language .. 1 0- 134 

18.6.10 (TJ) Investigative Method: Mail Cavers _ 10-135 

1 8.6. 10. 1 (U } Su mmaiy ..... .... 10- 135 

1 8.6. 10.2 f U} Application... ................ ....... ..... ..... 10- 135 

1 8.6. 10.3 fU) Legal Authority.... ........ IS- 135 

18.6.10.4 (U) Definition of Investigative Method . 10-135 

18.6.10.5 fU] Standard for Use and Approval Requirements for Investigative Method... 10-136 

18.6.10.6 (U) Duration of Approval.^. ____ 10-138 

1 8.6.10.7 f U } Storage of Mail Cover I nformation 10- 1 38 

1 8.6. 10.8 (U } Return of Mai I Cover Info rmatio n to US PS 18-139 

18.6. 10.9 (U) Cd mp3 ia nee and Monito ring ...... 10- 1 39 

18.6.11 (U) Investigative Method: Polygraph Examinations 18-141 

18.6.11.1 (U) Summary .......................... 18 141 

1 8.6.1 1.2 (U) Application, 10-141 

18.6.1 1.3 (U) Legal Authority.....— .. — — ....... 18-141 


18.6.11,4 (U) Standards for Use and Approval Requirements for Investiptive Method .. 18-141 


18.6.11.5 (U) Duration oFApprovaL................ .. 10-141 

1 8.6.1 1.6 (U) Specific Procedures ..... .... . 10- 142 

18.6.11.7 (U) Compliance and Monitoring ........ .,..10-142 

18.6.12 (U) Investigative Method: Trash Covers [Searches that Do Not Require a 

Warrant or Court Order).... - 18-143 

18.6.12.1 (U) Summary...,..,... ......... ..... ..... .... .... 18-143 

1 8.6. 12.2 (U) Application... 18-143 

1 8.6.1 2.3 (U) Legal Authority.... ............................. 1 8- 143 

18.6.12.4 (U) Definition of Investiptive Method — ......... 18-143 

10.6.12.4.1 (U) Distinction between "Trash Covers" 1 and Searches of Abandoned 

Property orTrash 18- 143 

10.6.12.4.2 (U) Determination of an Area of Curtilage Around a Home........... ........ 18-144 


Version Dated. 
October 15,2011 


xxii 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Invest [gallons and Operations Guide 

16,6.12,5 (U) Standards for Use and Approval Requirements for Investigative Method., 18-144 
18.6.13 ( U] Investigative Method: Undercover Operations 18-145 

18.6.13.1 (Li) Summary...... __ , _ 18-145 

18.6. 13.2 ( U) Lega] Authority. . .. . 18- 1 45 

18,6. 1 33 (Li) De finition of investigative Method • 1 8- 1 45 

18.6. 1 3.3 . 1 (Lf ) Disti nction B etween Sensitive Ci rcu mstanre and Sensitive 1 nvestigati ve 

18.6.13.4 (U//FOUOJ Standards for Use and Approval Requirements for Investigative 

18.6.13.4.1 (U) Standards for Use of Investigative Method 18-146 

18.6.13.4.2 (U//FOUO) Approval Requirements for UCGs [investigations of violations of 
federal criminal law that do not concern threats to national security or 

foreign intelligence) 18-146 

18.6.13.4.3 (U//FOUO) Approval Requirements for UCOs (investigations of violations 

that concern threats to national security or foreign intelligence) ... — 18-147 

18.6.13.5 (U) Duration of Approval ..... ...... 18-148 

18.6.13.6 (U) Additional Guidance.,.., 18-148 

18.6.13.7 (li) Compliance and Monitoring, and Reporting Requirements 18-148 

18.7 (U) Authorized investigative Methods in Full Investigations ... ........ 18-149 

18.7.1 (UJ Investigative Method: Searches - With a Warrant or Court Order 

(reasonable expectation of privacy)— : ■ 18-151 

18.7. 1.1 ( U) Sum ma ry......~..... ,*. ..... 18-151 

18.7. 1.2 ( U) Legal Authority,,. — 18-151 

18.7. 1. 3 (U) Definition of I nvestigpti ve M ethod . __ 1 8- 1 52 

1 8. 7. 1 .3.1 (U] Re q u ire ment for Reasonableness ....„ 1 B- 1 52 

18.7.1.3.2 (U) Reasonable Expectation of Privacy ............ ...... 18-152 

1 8. 7. 1.3 .3 (U) Issuance of Search Warrants 18-152 

1 8. 7,1 .3,4 (U) Property o r Persons That May be Seized with a Warrant 18-153 

18.7.1.4 (U) Approval Requirements for Investigative Method 18-157 

18.7. 1 .5 ( Li) Du ration of Approval . 18-157 

18.7. L6 ( U) Speci fic Procedures - - — 18-157 

18.7. 1.6. 1 (U) Obtai a ing a Warrant under FRCP Rule 4 1_ — 18-157 

18.7.1.6.2 (U) Obtaining a FISA Warrant 18-160 

1 8.7.2 ( U ) In vestiga Live Met hod : E lectronic S u r veil I a nee - T itle I II .... 18-165 

1827.2.1 (LJ) Summary.... 18-165 

18.7.2. 2 (U) Legal Authority^. ....... 18 1 65 

18.7.2.3 (Li) De finition of Investigative Method „,... - — - — - 18-165 

18.7,2 .4 [ Li) Title 1 1 1 Gen erally - - ... 18- 1 65 

18.7.2. 5 ( U) Standards for Use and Approval Requirements for Non -Sensitive Title 111 si 8- 166 


xxiii 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Version Dated: 
Ortob*T 15,2011 


I ^CLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


1 8. 7,2ij (Lf) Sta nda r ds far Use and Appro va I Req ui remen ts for Sensitive Tide Ills... 1 8- 166 

18.7 XI (U) Procedures For Emergency Title It I Interceptions . ______ ... IB-167 

IB, 7.2, 7.1 (U) Obtaining Emergency Authorization ■ ______ IB- 168 

1B.7.2.7.2 (U) Post- Emergency Authorization — ______ __ IB- 169 

1 S.7.2.8 (U) Pre-Title 1 1 3 Electronic Survei Elance (ELS U R) Search Policy ____ 18-170 

18.7.2.9 (U) Duration of Approval for Title Jl l.__ __ ___. 18-171 

18.7.2.10 (U) Specific Procedures for Title Hi Affidavits..-..- _ ______ 18-171 

1 8.7.2. 1 1 (U) Dispute Resolution for Title 3 1 1 Applications _. _ 18-172 

18.7.2.12 (U) Notice and Reporting Requirements - Title lll._._ __ ..._ 18-172 


18.7,3 (U) Investigative Method: Electronic Surveillance - FISA and FISA Title Vlt 

(acquisition of foreign intelligence information}.- 18-175 

18.7.3.1 (U) Summary _. ________ _ 18 175 

18.7.3.2 (U) Foreign Intelligence Surveillance Act (FISA)_ - _. IB-175 


1B.73.2.1 

1B.7.3.2.2 

18.7.3.2.3 

18.7.3.2.4 
1B.7.3.2.5 
18.7,3.2.6 
1&7 .3.2.7 
18.7.3.2.8 
1B.7.3.2.9 


(Lf) Legal Authority _______ __ 18-175 

(Lf) Definition of Investigative Method— _ _____ 18-175 

(Lf) Standards for Use and Approval Requirements for FISA 18-176 

(Lf] Duration of Approval for FISA— ... _ 18-177 


(U//FQLfO) Specific Procedures for FISA 18-177 

(Lf] Notice and Reporting Requirements for FIS _ 18-179 

(Lf] Compliance and Monitoring for FISA , 18-179 

(Lf] Special Circumstances for FISA___. , 18-180 

(UJ FISA Overcollection 18-180 

18,7.3.2.10 (Lf) Other Applicable Policies .„ 18- 180 

1B.7.3.3 (U) FISA Tide VII (acquisition of foreign intelligence information] 18-180 

1B.7.3.3. 1 (U) Summary . ______ 18-180 

18.7.3.3,2 (U] Legal Authority _ ....... _. 18-180 

1 B.7.3.3.3 (Lf) D efi nition of 3 n vestigative M ethod 18-180 

1B.7.3.3.4 (Lf//FOUO] Standards far Use and Approval Requirements for Investigative 

M ethod 1 8- 181 

16.7 ,3.3.5 (Lf) Duration of Approval 18-181 

1 8. 7.3.3.6 (U//FOUO) Specific Col lection Procedu res for Title VI I ________ 18-181 


19(U) Arrest Procedure Policy.... 

19.1 (Lf ) Arrest Wa rra nts.____.___ 

19.1.1 (Lf] Complaints 

19.1.2 (U) Arrest Warrants .____ 

19.1.3 (Lf) Jurisdiction........... 

19. 1 .4 (U) Perse n to be Arrested 


19-1 

_ _19-1 

19-1 
.____19-1 
19-1 


VersEaa Hared, 
October 15.2Q11 


xxiv 

UNCLASSIFIED- FOR OFFICIAL USE ONLY 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


19 . 2.1 


19.2.5 
193 [U] 

19.3.1 

19.3.2 
19.33 
19.3.4 

19.4 (U] 
19.4.1 


19.4.5 
193 (U] 
193.1 
19.5.2 

193.3 

193.4 

19.6 (U] 

193.1 

193.2 
19.6.3 
193.4 

19.7 fU] 


19.73 
i9.fi (LT) 


(L] Policy _____ ... 19-2 

(U) Prompt Execution.. _______ _ __ .. ___ _____ 19-2 

(L] Arrest Plans. 19-2 

(U] Possession and Display of Warrant _________ _____ .19-3 

Arrest without Warrant : 19-3 

(U) Federal Crimes _ _ ...... .....___l9-3 

(U] Notification to U.S. Attorney.. 19-3 

(U) Non-Fed eral Climes _ _ ___ _ 19-3 

[U] Adherence to FBI Policy _ _ _____ __ ..... 19-4 

Prompt Appearance before Magistrate ______ ___ __.__19-4 

(UJ Definition of Unnecessary Delay _____ .19-5 

(U] Effect of Unnecessary Delay.......... _______ _____ _____ _19-5 

(U) Necessary Delay.. __ _____ , _ .... __ _.19-6 

f U ] Initial Processing ... __ 19-6 

( U ] Collect] on of D N A after Arrest or Detention ______ 19- 6 

Use of Force... ..... _ __ .. _... _____ 19-7 

( U] Ide ntificati on __ _____ .. .. __ 19-7 

(U) Physical Force - 19-7 


[U] Restraining Devices __ ___ ....... __19-7 

Manner of Entry_ ..... .. .. 19-7 

(U) Knock and Announce. .. ... ....... .. ........... 19- 7 

( U ) Suspect's Premises., _ _ _ ______ ........... __ 19-3 

(U) Third Party Premises..,. _ .. _ 19-6 

( U ] Exigent Circumstances .. _____ _______ 19-3 

Search Incident to Arrest T — — * __19-8 

(U] Prerequisite: Lawful Arrests _____ .......... ________ 19-9 

(U) Scope and Timing Requirement ... __ ________ _l9-9 

[U] Inventory of Personal Property..... ... ....... ........... .......... _ .. .. 19- 10 

Medical Attention for Arrestees.. ~ • _ 19-10 


19.9 (U) Arrest of Foreign Nati on als .. __ _ 19-10 

19.9.1 f U) Requirements Pertaining to Foreign Nationals ......... ..._ 19-10 

19.9.2 (U] Steps to Fallow When a Foreign National is Arrested or Detained ...... 19-1 1 

19.9.3 (U] Suggested Statements to Arrested or Detained Foreign Nationals ...... 19-13 

19.9.4 [U) Diplomatic Immunity. _. ... _ _ .. . 19-13 


xxv 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Version Halted: 
OctD-ber 1 S.Z 0 U 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 

1910 (U] Arrest of News Media Members *,**,*, * _ 19-14 

19,1 1 (IT) Arrest of Armed Forces Personnels * 19-14 

19*12 (U) Arrest of Juveniles .,.*,.*, *,.***,..,* *, ,.*,*,**,*,.*, —-...,■ ,**.*, *,.*-, 19-15 

19*12*1 [IT] DeFin ition *** .**.*,*, *. — .„*,**,,.* * 19-15 

19.12*2 (U) Arrest Procedures *,.**. *,...*,.*-,.*, *,..*..* 19-15 

20 (U) OtJi er I n ve st igat i ve Re sou rets _ .. Z 0- 1 

20*1 (U) Ove rview .,„.*,. .**,.***,.**.,.*, *, *,. ^*,*,.*, *,*,.*,... **,**,**, .*20 - 1 

20,1*1 (U//F0U0] Name Trace Requests (CIA and NSA)*. 20-1 

20*1*2 (U//F0U0] Blind Faith Program,**,...*, *.*,.*_ *,.*,._. „*,.*.*, **,.*,.20-1 

20*1.3 (U//F0UQ) Behavioral Analysis - Operational Behavioral Support Program *,.*, *,J20-1 

20.1.4 [U//FQUO} Sensitive Technical Equipment**,*,,.,* *,...*, *,*,,*,*,**,*,. *,.*,*,**,**.*,**,*,.*,*,*20-1 

20*2 (U// FO U 0) Name Trace Requests (CIA and NS A] ,™20^ 1 

20*2. 1 (U ) Authorized I nvestigative Activity **,*..*,.*~** *...**, *~,.*, 20- 1 

20*3 (U//F0U0) Blind Faith Program*,.*.*,..* 20-1 

20*3,1 (U ) Authorized I nvestigative Activity**..***.****.**.*, ,*, *_ *.20-2 

20,4 (U//FOUOJ Operational Behavioral Support Program - CIRG's Behavioral Analysis 

Units (BAUs) and/or CD's Behavioral Analysis Program,.,,,,,,,.*,,, *,.*,.*,*,.*,.„***.,_*,_*,_*,*,**,. *,**,*,*.,*20-2 

2 0*4, 1 (U ) Authorized I nvestigative Activity *, *,*, *.*,.*_.*,*,* .*, **.*.**.**20-2 

20*5 (U//F0U0] Sensitive Technical Equipment*,.*^,. .*,^**,**-,.*,„,*,.„„.*,.*,.„^,*20-2 

20*5,1 (U) Authorized Investigative Activity *~, *- *, *, *~.„ *,.*^,.*,20-2 

21 |U ) Intelligence Collection * .....21-1 

21*1 (If ) I ncidental Collection.*,.*^ *~, *„*,.,**, * *,„.*,. *,„* 21-1 

2 1.2 (U ) F BI N ational Collection Requirements * *,*, *,*,..,.*,21-1 

21*3 [U//FOUO] FBI Field Office Collection Requirements,.*,**.*^, *,-21-2 


Veraimi Dated. 
October 15. ZD 1 1 


xxvi 

UNCLASSIFIED - FOR OFF ICIAL USE ONLY 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


APPENDICES 


Appendix A: (U) The Attorney General's Guidelines for Domestic FBI Operations 
Appendix B: (U) Executive Order 12333 

Appendix C: (U//FOUO} Use and Targeting of a Federal Prisoner Held in the 
Custody of the BOP or USMS During an FBI Predicated Investigation; Interview 
of a Federal Prisoner Held in the Custody of the BOP or USMS During an FBI 
Assessment or Predicated Investigation 

Appendix D: (U) Department of Justice Memorandum on Communications with 
the White House and Congress, dated May 11, 2009 

Appendix E: {U//FOUOJ Attorney General Memorandum - Revised Policy on the 
i seor Disclosure of FISA information, dated January 10, 2008 

Appendix F: (UJ DO| Policy on Use of Force 
Appendix G: (U) Classified Provisions 

Appendix H: (U) Pre-Title 111 Electronic Surveillance (EL5UR) Search Policy 

Appendix 1: (U) Accessing Student Records Maintained by an Educational 
Institution (“Buckley Amendment") 

Appendix J: (U) Case Fite Management and Indexing 

Appendix K; (U) Major Cases 

Appendix L: (U) On-Line Investigations 

Appendix M: (U) The Fair Credit Reporting Act (FCRA) 

Appendix N: (U) Tax Return information 
Appendix 0: (U) Right to Financial Privacy Act (RFPA) 

Appendix Pi (U) Acronyms 
Appendix Q: (U) Definitions 

Appendix R; (U) Superseded Documents and NFIPM, MIOG, and MAOP Sections 
Appendix S: (U) Lists of Investigative Methods 


xxvii 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Vers ton Dated: 
October IS, ZD IE 


L n rLASS 'f IED r FOR 0FF| uial use only 

Domestic Investigation and Operations Guide 


This Page is fnlenrianalty p/atiH 


UNCLASSIFIED - For OFFICIAL Use ONLY 



UNCLASSIFIED FOR OFFICIAL USE ONLY 
Domestic Investigation and Operations Guide 


[ U) PREAMBLE 


August 17. 201 1 

(U) As the primary investigative agency of the federal government, the FBI has the authority and 
responsibility to investigate all violations of federal Law that are not exclusively assigned to 
another federal agency. The FBI is further vested by taw and by Presidential directives with the 
primary role in carrying out criminal investigations and investigations of threats to the national 
security of the United States. This includes the lead domestic role in investigating international 
terrorist threats to the United States, and in conducting counterintelligence activities to counter 
foreign entities 1 espionage and intelligence efforts directed against the United States. The FBI is 
also vested with important functions in collecting foreign intelligence as a member agency of the 
United Stales Intelligence Community (US 1C}, (AGG-Dom, Introduction) 

(U) While investigating crime, terrorism, and threats to the national security, and collecting 
foreign intelligence, the FBI must fully comply with all laws and regulations., including those 
designed to protect civil liberties and privacy. Through compliance, the FBI will continue to earn 
the support, confidence and respect of the people of the United Slates. 

(U) To assist the FBI in its mission, the Attorney General signed the Attorney General s 
Gukk'imes for Domestic FBI Operations (AGG-Dom) on September 2% 2008, The primary 
purpose of the AGG-Dom and the Domestic Investigations and Operations Guide (DIOG) is to 
standardize policy so that criminal, national security, and foreign intelligence investigative 
activities am accomplished in a consistent manner, whenever possible (e g., same approval, 
notification, and reporting requirements). In addition to the DIOG, each FBJHQ operational 
division has a policy implementation guide fPG) that supplements this document. Numerous FBI 
manual s T electronic communications, letterhead memoranda, and other policy documents are 
incorporated into the DlOG and the operational division policy implementation guides, thus, 
consol [dating the FBI’s policy guidance. The FBI HQ Corporate Policy Office (CFO) plays an 
instrumental rote in this endeavor. Specifically, the CPD maintains the most current version of 
the DJOG on its website. As federal statutes, executive orders. Attorney General guidelines, FBI 
policies, or other relevant authorities change, CPO will electronically update Lhc DIQCj after 
appropriate coordination and required approvals. 

(U) This revised DIOG is a direct result of more than 700 comments received from field and 
Headquarters employees after release of the initial DIOG In December 2008, Each suggestion 
was reviewed by a working group comprised of experienced field agents and Chief Division 
Counsels, as well as representatives from the CPO. the Office of General Counsel (OGC), and 
the Office of Integrity and Compliance (Ol C), Many of these changes and suggestions have been 
incorporated In the revised DIOG. These changes to the DIOG should better equip you to protect 
the people of the Unucd States against crime and threats to the rational security and to collect 
foreign intelligence. This is your document, and it requires your input so that wo car provide lhc 
best service to our nation. If you discover a need for change, please forward your suggestion to 
FBIHQCPO. 

(U) Thank you for your outstanding service! 

Robert S. Mueller, 111 
Director 
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1 (U) SCOPE AND PURPOSE 


1.1 (U) Scope 

(U) The Domestic Investigations and Operations Guide (DIOG) applies to all investigative 
activities and. intelligence collection activities conducted by the FBI within the United States, in 
the United States territories, or outside the territories of all countries. This policy document does 
not apply to investigative and intelligence collection activities of the FBI in foreign countries:, 
those arc governed by: 

A }(Uf The Attorney General 's Guidelines for Extraterritorial FBI Operations and Criminal 
Investigations: 

B) (Vi The Attorney General \s Guidelines for FBI National Security Investigations and Foreign 
Intelligence Collection (those portions which were no I superseded bv The A ttomey Genera! 
Guidelines for Domestic FBI Operations): 

Cl (U) The Attorney Generat Guidelines on the Development and Opera! ion of FBI Criminal 
Informants and Cooperative Witnesses in Extraterritorial Juris dictions, 

D) (U ) ' The Attorney Generat Procedure for Reporting and Use of. Information Concerning 
Violations of /. ej ii 1 and Authorization ft >r Participation in Otherwise Illegal Activity in FBI 
Foreign Intelligence, Counterintelligence or International Terrorism Intelligence 
investigations (August A. I9BR; and 

E) ( Uf Memorandum of Understanding Concerning Overseas and Domestic Activities of the 
Central Intelligence Agency and the Federal Bureau of Investigation {2005), 

(U//FOUO) Collectively, these guidelines and procedures are hereinafter referred to as the 
Extraterritorial Guidelines in the DiOG. 

1.2 (U) Purpose 

(U) The purpose of the DIOG is to standardise policies so that criminal, national security, and 
foreign intelligence investigative activities arc consistently and uniformly accomplished 
whenever possible fe.g., same approval, opening/dosing, notification, and reporting 
requirements), 

(U) This policy document also stresses the importance of oversight and self-regulation to ensure 
that all investigative and intelligence collection activities are conducted within Constitutional 
and statutory parameters and that civil liberties and privacy are protected, 

(U) In addition to this policy document, each FBI Headquarters (FB1HQ) operational division 
has a Policy Implementation Guide (PG) or several PGs that supplement the DIOG, These 
operational division PGs may not contradict, alter, or otherwise modify the standards established 
in the DIOG. As a result, numerous FBI manuals, electronic communications, letterhead 
memoranda, and other policy documents are incorporated into the DIOG and operational 
division PGs, thus, consolidating FBI policy guidance. 
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2 (U) GENERAL AUTHORITIES AND PRINCIPLES 


2.1 (U> Authority of the Attorney General's Guidelines for Domestic FBI 

Operations 

tU) The Attorney General 's Guideline?: far Domex lie FBI Operations (AGG-Dom) apply to 
investigative and intelligence collection activities conducted by the FBI within the United States, 
in the United States territories, or outside the territories of all countries. They do not apply to 
investigative and intelligence collection activities of the FBI in foreign countries, which are 
governed by the Extraterritorial Guidelines discussed in DIOG Section 13. (Reference; AGG- 
Dorn, Part LA.) 

(U) The AGG-Dom replaces the following six guidelines: 

A) { U) The Attorney General T Guidelines an General Crimes, Racketeering Enterprise and 
Terrorism Enterprise Investigations t May 30, 2002); 

B) (Uj The Attorney General's Guidelines for FBI National Security Investigations and Foreign 
Intelligence Collection (October 31. 2003}; 

C) (U) The Attorney General s Supplemental Guidelines for Cot lection, Retention, and 
Dissemination of Foreign Intelligence (November 29, 2006), 

D) (U) The Attorney General Procedure for Re port tog and Use of Information Concerning 
Violations of Law and Authorization for Participation in Otherwise Illegal Activity in FBI 
Foreign Intelligence, Counterintelligence or International Terrorism Intelligence 
Investigations (August 8 t 1988); 

E) (U) The Attorney General's Guidelines for Reporting on Civil Disorders and Demonstrations 
Involving a Federal Interest (April 5, 1976}: and 

F) (U) The Attorney General 's Pn verdures for Lawful, Warrantless Monitoring of Verbal 
Communications (May 30, 1002) { only portion applicable to FBI repealed) 

<U) Certain of the existing guidelines that are repealed by the AGG-Dpm currently apply in part 
to extra territorial Operations, including the Attorney General 's Guidelines far FBI National 
Security Investigations and Foreign Intelligence Collection, and the Attorney General Procedure 
far Reporting and Use of Information Concerning Isolations of Law and Authorization for 
Participation in Otherwise Illegal Activity in FBI Foreign Intelligence, Counterintelligence or 
International Terrorism Intelligence Investigations. To ensure that there is no gap in the 
existence of guidelines For extraterritorial operations, these existing guidelines will remain in 
effect in their application to extraterritorial operations notwithstanding the general repeal of these 
existing guidelines by the AGG-Dom. 

(U) Also, the classified Attorney General Guidelines for Extraterritorial FBI Operation and 
Criminal Investigations (1993} will continue to apply to FBI criminal investigations, pending the 
execution of the new guidelines for extraterritorial operations. Finally, for national security and 
foreign intelligence investigations, FBI investigative activities will continue to be processed as 
set forth in (he classified Memorandum of Understanding Ci 7 ncerning_ 0 \^nem _and 
Ac ft cities of the Central Intelligence Agency and the Federal Bureau af Imestjeation (2005 ), 

VrlSlOiv 1 JtfUMl : 
October Lj. tOll 
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2.2 (U] General FBI Authorities under AGG-Dom 


(U) The AGG-Dom recognizes four broad, general I- til authorities. (AGC-Dom, Part LB.) 

2.2. l (U) Conduct Investiga tions and Collect Intelligence and Evidence 

(Li The FBI is authorized to collect intelligence and to conduct investigations to delect, obtain 
information about, and prevent and protect against federal crimes and threats to the national 
security and to collect foreign intelligence, as provided in the DIOG (AGG-Dom, Part II). 

{If) By regulation, the Attorney General has directed the FBI to investigate violations of the tews 
of the United Slates and to collect evidence in investigations in which the United Slates is or may 
he a party in interest, except in investigations in which such responsibility is by statute or 
otherwise spec i Ileal I y assigned to another investigative agency. The FBI'S authority to 
investigate and to collect evidence involving criminal drug laws of the United States is 
concurrent w ith such authority of the Drug Enforcement Administration (DE A) (28 C.F.R. § 
fl,85[a]). 


2.2.2 (U) Provide Investigative Assistance 

(U) The FBI is authorized to provide investigative assistance toother federal, state, local, or 
tribal agencies, and foreign agencies as provided in Section 1 2 of the DIOG (AGG-Dom. Part 
III). 

2. 2.3 (U) Conduct Intelligence Anal ysis and Planning 

fU) The FBI is authorized to conduct intelligence analysis and planning as provided in Section 
15 of the DIOG (AGG-Dom, Part IV). 

2. 2.4 (U) Retain a nd Sha re Inform* tion 

(U ) The FBI is authorized to retain and to share information obtained pursuant to the AGG-Dom, 
as provided in Sections 12 and H of the DIOG (AGG-Dom, Part VI). 

2.3 (U) FBI as an Intelligence Agency 

(U) The FBI is an intelligence agency as well as a law enforcement agency. Its basic functions 
accordingly extend beyond limited investigations of discrete matters, and include broader 
analytic and planning functions. The FBFs responsibilities in this area derive from various 
administrative and statutory sources. See Executive Order 12333 : 28 U.S.C. (j 532 note 
(incorporating P.L. 108-458 §£ 2001-2003) and 534 note (incorporating P.L. 109-162 15 1 107). 

(U ) Part IV of the AGG-Dom authorizes the FBI to engage in intelligence analysis and planning, 
drawing on all lawful sources of in format ion. The functions authorized under that Part includes: 
(i) development of overviews and analyses concerning threats to and vulnerabilities of the United 
States and its interests; (it) research and analysis to produce reports and assessments [see note 
below ) concerning matters relevant to investigative activities or other authorized FBI activities; 
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and nii) the operation of intelligence systems that facilitate and support investigations through 
the compilation and analysis of data and information on an ongoing basis. 

(U| Nate ; In the DIOG. the word “assessment” has two distinct meanings. The AGG-Dotn 
authorizes as ail investigative activity an "Assessment,” which requires an authorized purpose 
and objective (s) as discussed in the DIOG Section 5, The United States Intelligence Community 
(USIC), however, also uses the word "assessment 1 ' to describe written intelligence products as 
discussed in the DIOG Section 15,6,1,2. 

2,4 fU) FBI Lfai> Investigative Authorities 
Z 4. 1 (U) Introduction 

1U LOUO) The FBI’s primary investigative authority is derived from the authority oTtlie 
Attorney General as provided in 28 U.S.C. 509. 510, 533 and 534, Within this authority, the 
Attorney General may appoint officials to detect crimes against the United Stales and to conduct 
such other investigations regarding official matters under the control of the Department of 
justice (DOJ) and the Department of State (DOS) as may be directed by the Attorney General 
08 L'-S.C- § 533). The Attorney General has delegated a number ofhis statutory authorities and 
granted other authorities to the Director of the FBI {28 t'.F.R. § 0,85[al). Some of these 
authorities apply boLh inside and outside the United States. 

2.4.2 (U) Terrorism and Counterterrorism Investiga tions 

i t T The Attorney General has directed the FBI to exercise Lead Agency responsibility in 
Investigating all crimes for which DOJ has primary or concurrent jurisdiction and which involve 
terrorist activities or acts in preparation of terrorist activities within the statutory jurisdiction of 
the United States, Within the United Stales, this includes the collect ion, coord tnaii on. analysis, 
management and dissemination of intelligence and criminal information, as appropriate. If 
another federal agency identifies an individual who is engaged in terrorist activities or acts in 
preparation of terrorist activities, the other agency is required to promptly notify the FBI. 
Terrorism, in this context, includes the unlawful use of force and violence against persons or 
property to intimidate or coerce a government, the civilian population, or any segment thereof, to 
fiber political or social objectives {28 C.F.R. § 0.85[1]), For a current list of legal authorities 
relating to the FBI's investigative jurisdiction in terrorism investigations, see the OGC Law 
Library website at http://homc. fbinet . fb i/DO/QG C/Fapo&/M a i nLaw Library. aspx . 

|U TOUO) DOJ guidance designates the FBI as Lead Agency for investigating explosives 
millers which, under the following protocol, demonstrate a possible nexus to international or 
domestic terrorism: 

A I (U//FVVO) Thefclfowingfactors are srnmg indicia o fa nexus to terrorism and lead-agency 
jurisdiction is assigned based on these factors alone: 

/) (U//FOUO) an attack on a government building, mass irons it, a power plant; nr 
2) (U//FOUO) (he use of a chemical, biological, radiological, or nuclear agents, 
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8) (U//FOUO) Requires each agency ta notify' the ether immediately when responding to art 
explosives incident ami to share ail relevant information that ma\' serve to rule in or out a 
connection to terrorism; and 

C) (U//FOUO) Creates a process for the FBlUoint Terrorism Task Force (JTTF) to identify an 
explosives incident as connected to terrorism when there is relict hie evidence supporting that 
claim and establishes a pttxess for shifting lead-agency jurisdiction to the JTTF mill the 
issue is resolved: (See DOJ Memorandum, dated August 3, 2Q10. on "Protocol for .Assisnhs 
l cud Age my Juris diction i n Explosives I nvesti gations. ") 

2 . 4 . 2.1 [U J "Federal Cr imfjs of Terrori sm * 

(U) Pursuant to the delegation in 28 C.F.R. § 0.85(1), the FBI exercises the Attorney 
General’s lead invest igalive responsibility under 1 8 U.S.C, § 2332b(f) for all ‘‘federal crimes 
of terrorism' 1 as ident ified in that statute. Many of these statutes grant the FBI Extraterritorial 
investigative responsibility (See the cited statute for the fill] particulars concerning elements 
of the offense, jurisdiction, etc,). Under 18 U-5-C- § 2332b(gX5), the krrm ''federal crime of 
terrorism" means an often sc that is: (i ) calculated to influence or affect the conduct of 
government by intimidation or coercion or to retaliate against government conduct; and (ti) 
violates a federal statu te relating to: 

A) (U) Destruction of aircraft or aircraft facilities (18 U.S.C. § 32); 

B) (U) Violence at international airports ( applies to offenses occurring outside the United States 
in certain situations) (18 U.S.C. § 37); 

C) (U) Arson within ’special maritime and territorial jurisdiction (S MTJ) of the United States JH 
(SMTJ is defined in IS US.C, § 7) (18 US.C. §81); 

D) (V) Prohibitions with respect to biological weapons (extraterritorial federal Jurisdiction if 
offense committed by or against a United States national) (18 U.S.C. § 175); 

E) fU) Possession of biological agents or toxins by restricted persons (18 (JSC. § 1 75b); 

Ft (U) Variola virus (includes smallpox and other derivatives of the variola major virus) (applies 
to offenses occurring outside ihe United States in certain situations) (18 U.S.C. § i 75c); 

G) (U) Prohibited activities regarding chemical weapons (applies to offenses occurring outside 
the United Stales in certain situations} (18 US.C. § 229 ) (E.O. 13128 directs any possible 
violation of this statute be referred to the FBI); 

H) (U) Congressional, Cabinet, and Supreme Court assassination , kidnapping and assault (18 
U.S.C § 35l[a]-[dj) (IS US.C. § 351[g] directs that the FBI shall Investigate violations of 
this statute}: 

li (U) Prohibited transactions involving nuclear materials (applies lo offenses occurring outside 
the United Slates in certain situations) (18 U.S.C. § 831); 

J) (U) Participation in nuclear and weapons of mass destruction threats to the United States 
(extraterritorial federal juris die turn ) (18 US.C. § 832); 

K) if U) Importation, exportation, shipping, transport, transfer, receipt, or possession of plastic 
explosives that do not contain a detection agent (18 U.S.C. § 842[ntJ and [n]); 

L) (U) Anon or bombing of government property risking or causing death (18 U.S.C § 844 jf} [2] 
or ( 3} t (18 (JSC § 84ti[a j grants FBI and the Bureau of Alcohol. Tobacco. Firearms, and 
Explosives (ATF) concurrent authority' in investigate violations of this statute). See Section 
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2.4.2. LL above regarding DOJ Memorandum dated 08/03/201 0 on A TFfFBI Lead Agency 
Jurisdiction; 

M} (U) Arson or bombing of property used in or affecting interstate or foreign commerce {IS 
U.S.C, § 844 Iff) (18 U.S.C § 846{t»J grants FBI and A TF concurrent authority' to investigate 
violations of this statute): 

N) (U) Kilting or attempted killing during on attack on a federal facility with « dangerous 
weapon (18 USC. § 930fc]); 

O) (U) Conspiracy within United Stairs jurisdiction to murder, kidnap, or maim persons at any 
place outside the United States (18 U. 5 C § 9$6[a][ 1 ]); 

Pi (U) Using a computer for unauthorized access, transmission, or retention of protected 
information (18 U.S.C, j itiSOfaJflJ) (18 USC £ W39[djf2] grunts the FBI “primary 
authority ” to investigate Section WJOfaJffJ offenses involving espionage, foreign 
counterintelligence, information protected against unauthorized disclosure fur reasons of 
national defense or foreign relations, or Restricted Data as defined in the Atomic Energy Act, 
except for offenses affecting United States Secret Service (USSS) duties under 18 USC. 4 
m6[aj); 

Q) (U, l Knowingly transmitting a program, information , code, or command and thereby 

intentionally causing damage, without authorization, to a protected computer (18 U.S.C. jf 
m0f a ff5}[Af(i]); 

Pi (U) Killing or attempted killing of officers or employees of the United States, including am 
member of the uniformed services (18 U.S.C. $ 1 1 14); 

S) (U) Murder or manslaughter of foreign officials, official guests, or internationally protected 
persons (applies to offenses occurring outside the United Stales in certain situations) (18 
UrS.C. § 1116) (Attorney General may request military assistance in the course of 
enforcement of this section); 

T) (U) Hostage taking (applies to offenses occurring outside the United State* in Certain 
situations) (18 U.S.C. § 120$); 

U) (U) Willfully injuring or committing any depredation against government property or 
contracts (18 U.S.C. § 1461); 

V) (U) Destruction of communication lines, stations, or systems (IS U.S.C, $ 1362); 

W) (U) Destruction or ityury to hail dings ar property within special maritime and territorial 
jurisdiction of the United States (18 U.S.C, 4 1363}; 

X) (V) Destruction of $100.0(8) or more of an “energy facility "property! as defined in the statute 
(18 U.S.C. £ 1366); 

Y) (U) Presidential and Presidential staff assassination, kidnapping, and assault (18 U.S.C. $ 

1 751 fa], [bf, fcj. or fdj) ( extraterritorial jurisdiction) (Per 18 USC. f / 75 1 ft), 1 751 
violations must be investigated by the FBI; FBI may request assistance from any federal 
[including military], state, or local agency notwithstanding any statute, rule, or regulation to 
the contrary); 

Z) (U) Terrorist attacks and other violence against railroad carriers and against mass 
transportation systems on land, on water, or through the air (includes a school bus. charter, 
or sightseeing transportation; or any means of transport on land, water, or through the air ) 
(18 U.S.C. J 1992); 

AA) (U) Destruction of national defense materials, premises, ur utilities (18 U.S.C. § 2155); 
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BB) (U) Production of defective national defense materials, premises, or utilities (18 U.S.C. $ 
2156); 

CO (U) Violence against maritime navigation (18 U.S.C. § 2280): 

OP) (U) Violence against maritime fixed platforms (located on the Continental shelf of the 

United States or located internationally in certain situations) (18 U.S.C. § 228 h, 

EE) (U) Certain homicides and other violence against United Stales nationals occurring 
outside of the United States (IS U.S.C. $ 2232); 

FF) (U) Use of weapons of mass destruction (WMD) (against 'a national of the United States 

while outside the United States; aguinst certain persons or property within the United States; 
or frv a national of the United States outside the United States ) fI8 U.S.C. ,f 2332a) (WMD 
defined in 18 U.S.C. § 2tt2a[ejf2]); 

GG) (U) Acts of terrorism transcending national boundaries (includes murder , kidnapping, 
and other prohibited acts occurring inside and outside the United States under specified 
circumstances including that the victim is a member of a uniform service; includes offenses 
committed in the United States territorial sea and airspace abase and seabed below; includes 
offenses committed in special maritime and territorial jurisdiction of the United States as 
defined in 18 U.S.C § 7) (18 U.S.C $ 2332b); 

HH) (U) Bombings of place* of public use, government facilities, public transportation 

systems and infrastructure facilities (applies to offenses occurring inside or outside the United 
States in certain situations, does not apply to activities of armed forces during an armed 
conflict) (18 U.S.C. $ 2332f); 

11) (U) Missile systems designed to destroy aircraft (applies to offense* occurring outside the 
United States in certain situations) (18 U.S.C. ft 2332g); 

JJl(U) Radiological dispersal devices { applies to offenses occurring outside the Untied States in 
certain situations/ ( 18 U.S.C. § 2332h); 

KK) (U) Harboring or concealing terrorists (18 U.S.C. § 2339); 

LL) (U) Providing material support or resources to terrorists (18 U.S.C. § 2339A); 

MM) (U) Providing material support or resources to designated foreign terrorist organizations 

(extraterritorial federal jurisdiction) (18 U.S.C. § 2339B) f "The Attorney General shall 
conduct any investigation of a possible violation of this section, or of am' license, order, or 
regulation issued pursuant ta this section. ” 18 U.S.C. ff 2339Bfefflf), 

M) (U) Prohibition* against the financing of terrorism (applies to offenses occurring outside 
the United Slates in certain situations including on board a vessel flying the flag of the United 
States or an aircraft registered under the laws of the United States) ffH U S.C- f 2339C) 
f Memorandum of Agreement between the Attorney General and the Secretary of Homeland 
Security, dated May 13, 2005; FBI leads all terrorist financing investigations and operations); 

OO) (V) Relating to military-type training from a foreign terrorist organization 
f extraterritorial jurisdiction) (18 U.S.C. $23390); 

PPt (U) Torture applies only to torture committed outside the United States in certain 
situations; torture is defined in 18 U.S.C. f 2340(18 U.S.C $ 234QA); 

QQ) (U) Prohibitions governing atomic weapons (applies to offenses ocreurring outside the 
United States in certain situations) (42 U.S. C. § 2122) r FBI shall investigate alleged or 
suspected violations per 42 U.S.C. § 227 If h]); 
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RR) (U) Sabotage of, nuclear facilities or fuel (42 US.C. $ 2284) (FBI shall investigate 

aikgtd or inspected violations jier 42 U.S.C. $ 227 1 lb]); 

SS) (U) Aircraft piracy (applies to offenses occurring outside the United States in certain 

situations) (49 U S.C. ,tf 46502) (FBI shall investigate per 28 U.S.C. § 538); 

JTi (II) Assault on a flight with a dangerous weapon (applies to offenses occurring in 
the "special aircraft jurisdiction of the United States ” as defined in 49 U.S.C. jf 46501.(2]); 
(second sentence of 49 U.S.C. j 465(14) (FIJI shall investigate per 28 U.S.C, ij 538): 

UU) (U) Placement of an explosive or incendiary' device on an aircraft (49 US.C . § 

46505 fh] [3]) (FBI shall Investigate ptr 2$ U.&C. $ 538); 

V¥) (U) Endangcrment of hitman life on aircraft by means of weapons (49 U.S.C § 46505 fcj) 

(FBI shall investigate per 28 U.S.C. # 538); 

WW) (IT) Application of certain criminal laws to acts on aircraft (if homicide or attempted 
homicide is involved) ( applies to offenses occurring in the "special aircraft jurisdiction of the 
United States" as defined in 18 U.S.C § 46501(2}); (49 U.S.C. $46506) (FBI shall 
investigate per 28 U.S.C, f 538); 

XX) ( U) Damage or destruction of interstate gas or hazardous liquid pip dine facility (49 

U.S.C. f 60 1 23 fbj); and 

YY) (U) Section WWA of the Controlled Substances Import and Export Act (relating to 
narco-terrorism). 

2 A , 2,2 [ U] Additional o ffenses not de fi n ed as "F ed eral Cri m es o f Terror ism" 

{U) Title 18 U.S.C. § 2332l»;f) expressly grunts the Attorney General primary investigative 
authority for addit ional offenses not defined as "'Federal Crimes of Terrorism, 1 " These offenses 
are; 


A) (Vi Congressional Cabinet, and Supreme Court assaults (18 U.S.C, $ S5I[eJ) (18 U.S.C. y 
2 J Ifgj J directs that the FBI investigate violation* of this statute). 

B) (U) Using mail, telephone, telegraph, or other instrument of interstate or foreign commerce to 
threaten to kill. Injury, or intimidate any individual, or unlawfully to damage or destroy any 
building, vehicle, or other real or personal property hy means of fire or explosive (18 U.S.C. j 
844(eJ); (IS US.C. $ 846[a] grants FBI and AT F concurrent authority to investigate 
violations of this statute); 

C) (U) Damages or destroys by means office or explosive my building, which*, or other 
personal or real property, possessed, owned, or leased to the United States or am* agency 
thereof or any Institution receiving federal financial assistance (18 US.C, $ #44[f)[lf) (18 
U.S.C. $ 846(a) grants FBI and A TF concurrent authorin' to investigate violations of this 
statute). See Section 2,4.2. 1-L above regarding DOT Memorandum dated 08/02/201 9 on 
ATF/FBI Lead Agency Jurisdiction; 

Of (U) Conspiracy within United States jurisdiction fa damage or destroy property tn a foreign 
country ami belonging to a foreign country, or to any railroad, canal, bridge, airport < airfield, 
ar other public utility , public com eyance, or public structure, or any religions, educational, 
or cultural property' so situated (iff U.S.C. f 956(h)): 

E) (U) Destruction of 55, 006 or more of an ir energ\> facility " property' as defined in 18 US.C 
1266(c) (18 U.S C. § 1 366(b)); and 
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F) fit ') WUtfitf trespass upon, injury to r destruction of, or interference with fortifications, harbor 
defenses, or defensive sea areas (IS U.5. C, $ 2152), 

(U) Nothing in this Section of the D10G may be construed to Interfere with the USSS under 
IS U.S.C. § lost, 

2 .4.2. 3 (U//FDUO) NSPD-46/HSPD-1 S/U.S. POLICY AND STRATEGY IN THE WAR ON 

Terror" 

(U//FQUO) Annex II {Consolidation and Updating of Outdated Presidential Counterterrorism 
Documents), dated January 10, 2007, to the classified Nati onal Security Pres i dential Directive 
tNSPD) 4fi.Tionnc]and Security Pre sidential Directive f HSPD) 1 5 . dated Match 200b, 
establishes FBI lead responsibilities, as well as those of other federal entities, in the “War on 
Tenor.” Annex II directs departments or agencies with lead or primary responsibility under 
the Annex “to coordinate through the appropriate mechanism - their discharge of such 
responsibility with other relevant departments and agencies, except where indicated ctherw ise 
in the Annex,” 

(U//FOUO) Areas addressed in Annex IE include domestic incident management, continuity 
of operations, -domi nutty of government, air piracy and hijack mg* National Special Security 
Events fNSSE), maritime domain, WMD interdiction* critical infrastructure protection, and 
disrupting terrorists at home and abroad. Both NSPD-46/USPD-I5 and Annex II thereto are 
classified, 

2 A3 (U) COUNTERINTELLIGENCE AND ESPIONAGE INVESTIGA TIONS 

(U//FOUO) A representative list of federal statutes applicable to counterintelligence and 
espionage investigations appears below. For additional information, refer to the classified 
Conn te n ntclligcncc D njsit m fCI > j Pu lns Ijnplcmenutinn Guide ( PG ) and the current list of 
e spionage and counterintelligence authorities , 

2 .4.3. 1 (U ) ESPIO N AGE I N VESTIG ATIONS OF PEftSO N S I N U N ITED STATES DlPLO M ATIC 

Missions Abroad 

(U) Section 603 of the Intelligence Authorization Act of i990 {P.L. 10 1 -193) states that, 
subject to the authority of the Attorney General, “the FBI shall supervise the conduct of all 
investigations of violations of the espionage laws of the United States by persons employed 
by or assigned to United States diplomatic missions abroad. Ail departments and agencies 
shall provide appropriate assistance to the FBI in the conduct of such investigations.” Consult 
the Attorney General's extraterritorial guidelines and other applicable policy or agreements. 

2.4.3. 2 [IJ] Investigations of Unauthorized Disclosure of Classified Information 
TO A FOREIGN POWER OR AGENT OF A FOREIGN POWER 

(U) The National Security Act of 1947* as amended, establishes procedures For the 
coordination of counterintelligence activities {50 U.S.C. § 402a). Part of that statute requires 
that, absent extraordinary circumstances as approved by the President in writing on a case-by- 
ease basis, the head of each executive branch department or agency must ensure that the FBI 
is "advised immediately of any information, regardless of its origin, which indicates that 
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classified information is being, or may have beer, disclosed in an unauthorized manner to a 
foreign power or an agent of a foreign power," 

2AA (U) Criminal Investiga tions 

(LWFQUO) hi addition to the statutes listed above and below, refer to the appropriate 
progranVsttb-prograni Criminal Investigative Division tC ID IPG for additional criminal 
jurisdiction information, 

2 A, A 1. 1 (U) Investiga tions of a ircraft privacy and rela ted viola tions 

tU) The FRI shall investigate any violation of 49 U.S.C § 463 14 (Entering aircraft or airport 
areas in violation of security requirements) or chapter 465 (Special aircraft jurisdiction of Lhe 
United States) of Title 49, United Slates Code; (28 U.S.C S 538) 

2 A. 4.1.2 (U) Violent crimes a gainst foreign tra velers 

(U) The Attorney General and Director of the FBI shall assist state and local authorities in 
investigating and prosecuting a felony crime of violence in violation of the law of any Stale in 
which the victim appears to have been selected because he or she is a traveler from a foreign 
nation; (28 LLS.C § 540A[b]1 

2 A A. 13 (0) Felonious killings of sta te and local la w enforcement officers 

tU) The FIJI shall investigate any violation of 28 U.S.C, § 540; and 

2 A A, 1 A (U) Investiga tions of serial killings 

(U) The FBI shall investigate any violation of 28 U.S.C, £ 540B. 

2 A. 5 (U) A uthority of an FBI Special A gen t 

(U) An FBI Speeial Agent has the authority to: 

At fUi Investigate violations of the laws, including the. criminal drug laws, of the United States 

ill U.S.C. H W: 28 USC 534 md 535: 28 CA R § 035); 

B> (U) Collect evidence in investigations in which the United Stares is or may be a party in 
interest (28 CFR. § 0.85 [a] I as redelegated through exercise of the authority contained in 
28 C.F.R. § 0. 138 to direct personnel in the FBI ; 

Q (V) Make arrests (18 USC §§ 3052 and 3062); 

D) (U) Serve and execute arrest warrants and seize property' under warrant; issue and/or serve 
administrative subpoenas; serve subpoenas issued by other proper authority; and make civil 
investigative demands (18 US.C §§3052, 3107; 21 U.S.C. §876; 15 U.S.C. § 1312}: 

E) (V) Carry firearms (18 U.S.C. §3052); 

Ft (V) Administer oaths to witnesses, attending to testify or depose in the course of investigations 
of frauds on or attempts to defraud the United Stales or irregularities or misconduct of 
employees or agents of the United States ( 5 US- C, § 303); 
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G) (U) Seize property subject to seizure under the criminal and civil forfeiture laws of the United 
State* fe.g„ 18 US C §£ WW/ and 982); end 

H) (U) Perform other duties imposed ftv Iwn. 

(U) /Vote : For policy regarding Agent’s authority to intervene in non -federal crimes or make non- 
fcdcra! arrests, see Section 19, 3 3, 

2.5 (li) Status as Internal Guidance 

(U) The AGG-Dom, this DIOG, and the various operational division PGs are set forth solely for 
the purpose of internal DQJ and FBI guidance, They are not intended to, do not, and may not be 
relied upon to create any rights, substantive or procedural, enforceable by law by any party in 
any matter, civil or criminal, nor do they place any [imitation on otherwise lawful investigative 
and liligative prerogatives of the DOJ and the FBI. (AGG-Dom, Part LD.2.) 

2.6 (U) Departure from the AGG-Dom (AGG-Dom I.D.3) 

2.6.1 (U) Definition 

(U/A'OUO) A “departure” from the AGG-Dom is a deliberate deviation from a known 
requirement of the AGG-Dom. The word “deliberate” means the employee was aw r arc of the 
AGG-Dom requirement and affirmatively chose tu depart from it for operational reasons before 
the activity took place. Departures from the AGG-Dom may only be made in accordance with 
the guidance provided in this section. 

2. 6.2 (U ) DEPA R JURE FROM THE A GG-Dom IN Adva NCE 

(LV/FOUG) A departure from the AGG-Dom must be approved by the Director of the FBI. by 
the Deputy Director of the FBI, or by an Executive Assistant Director (LAD) designated by the 
Director, The Director of the FBI has designated, the EAD National Security Branch (MSB) and 
the EAD Criminal Cyber Response and Services Branch (CCRSB) to grant departures from the 
AGG-Dom. Notice of the departure must be provided by Electronic Communication (EC) to the 
General Counsel (GO using file number 333-HQ-C 1 629406. The Office of the General Counsel 
(OGO must provide timely written notice of departures from the AGG-Dom to either the DOJ 
Criminal Division or National Security Division (NSD), whichever is appropriate, or to both, and 
the Criminal Division or N$D must notify the Attorney General and the Deputy Attorney 
General. Notwithstanding this paragraplu ail activities in all circumstances must he carried out in 
a manner consistent with the Constitution and laws ol‘ the United, States. (AGG-Dom, Part I.D.3,) 

2. 6.3 (U) Emergency Departures from the A GG-Dom 

(U//FOUO) If a departure from the AGG-Dom is necessary without prior approval because of the 
immediacy or gravity of a threat to the safety of persons or property or to the national security, 
an FBI employee may, at his/her discretion, depart from the requiremen ts of the AGG-Dom 
when the designated approving authority for the investigative activity cannot be contacted 
through reasonable means. The Director, the Deputy Director, or a designated LAD, and the GC 
must be notified by EC of the departure as soon thereafter as practicable, but not more than 5 
business days after the departure using file number 333-EIQ-C 1 629406. The OGC must provide 

Vi'Fsuni iuu-. 
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timely written notice of departures from the AGG-Dom to cither the DOJ Criminal Division or 
NSD. whichever is appropriate, or to both of them, and the Criminal Division or NSD must 
notify the Attorney General and the Deputy Attorney General. Notwithstanding this paragraph, 
all activities in all circumstances must be carried out in a manner consistent with the Constitution 
and laws of the United States. (AGG-Dom, Part I.D.3.) 

2. 6.4 (U) Records of Departures from the AGG-Dom 

(U//FOUO) The GGC is responsible for maintaining records of all requests and approvals or 
denials of departures from the AGG-Dom, Records will be maintained in file number 333-KQ- 
C 1629406. 

2.7 [U) Departures from the DIOG 

2.7.1 (U) Definition 

(U//FOUQ) A “departure"' from the DIOG is a deliberate deviation from a known requirement of 
the DIOG. The word ‘"deliberate" means the employee was aw : are of the DIOG requirement and 
affirmatively chose to depart from il for operational reasons before the activity took place. 
Departures from the DIOG may only be made in accordance with the guidance provided in this 
section, 

2. 7.2 (U) Departure from the DIOG 

(U'/FOUO) A request for a departure from the DIOG must be submitted with an EC using file 
number 33 3 -HQ-C 1629406 and approved by the appropriate operational program Assistant 
Director (AD) with notice to the GG- Notwithstanding this paragraph, all activities in all 
circumstances must be carried out in a manner consistent with the Constitution and law r s of the 
United States. 

tU FOLIO) OGC will review all departures from the DIOG, If OGC determines the departure 
from the DIOCi also involves a departure from the AGG-Dom, OGC must provide timely written 
notice to DGJ in accordance with the provisions of Section LD.3 of the AGG-Dom, 

2. 7. 3 (D) Emergency Depar tores from the DIOG 

il‘ FGUQ) FBI employees may conduct or engage in investigative activity that deviates from 
the requirements of the DIOG, including utilizing investigative methods, without prior approval, 
when the designated approving authority for the investigative activity (if any) cannot be 
contacted through reasonable means and in the judgment of the employee one of the following 
factors is present: 

A) (U//FOUO) un immediate or grave threat to the safety of persons or property exists, or 

B) fUf/FOUOt an immediate or grave threat to the national security exists, or 
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Q (Uf/FOUO) a substantial likelihood exists that a delay wifi result in the loss of a Slgfttflctmt 
Investigative opportunity'. 1 

(L77FOUO) The appropriate operational program AD and the GC must he notified of the 
emergency departure by EC using file number 333-HQ-C1 629406 as soon as practicable, hut no 
laler than 5 business days after engaging in the activity or utilizing the investigative method. This 
documentation must also be filed in the applicable investigative file in which the activity or 
method was taken. OGC will review all departures from the DIOG. If OGC determines the 
departure from the DIOG also involves a departure from the AGG-Dom 1 OGC must provide 
timely written notice to DOJ in accordance with the provisions of Section I.D.3 of the AGG- 
Dom, Notwithstanding this paragraph, all activities in all circumstances must be carried out in a 
manner consistent with the Constitution and laws of the United States. 

2, 7 A (U) Records of Depar tures from the DIOG 

IU.7FOUO) The OGC is responsible for maintaining records of all requests and approvals or 
denials of departures from the DIOG. Records will be maintained in file number 333-HQ- 
C 1 629406. 

2,8 (U) Discovery of Non-compliance with DIOG Requirements after-the- 

fact 

2.8. 1 (U) Substantial Non- Compliance with the DIOG 

2.8.1, i (U) Substantial Non-Compuance 

(U//FOUO) “Substantial non-compliance" means non-compliance that is of significance to the 
matter and is more than a minor deviation from a DIOG requirement. : Non-compliance that 
relates solely to administrative or peripheral requirements is not substantial- Substantial non- 
compliance specifically includes the following: 

A) (VffFQUO) the unauthorized use of an investigative method: 

B) {UffFQUO} the failure to obtain required supervisory approval: 3 and 

C) {U//FOUO} non-compliance that has a potential adverse effect upon a member of the public 's 
indiviiiuaf rights or liberties, 

(U//FOUO) Example A: During an Assessment, ASAC approval was not obtained before 
using the Mobile Surveillance Team (MST) and the Bureau airplane to conduct surveillance. 
Because the approval was not obtained in advance nor was it done pursuant to an emergency 


1 [U//F0UQ} This Is nm a permissible factor (Hr departing from the AGG-Docn Thus, this factor may only 
provide a basis for a departure from the DIOG that does not require a departure from the AG G- Dam. 

3 (U//F0LID) Departures from the AGG-Dom and the DIOG do not fall within the definition of "non- 
compliance 1 as used in this section. Departures are in be handled as described Sections 2.6 and 2.7 and 
should ru>t He reported as “non-compliance" matters. 

MU/7FOU0] I f supervisory approval was obtained pursuant to Section 2-7 3 [ Emergency Departure from the 
DIOG}. the failure! to document this approval within 5 business days is a reportable 'substantial non- 
compliance" matter. 
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situation, as described in 2>7.3 t this would be “substantial" non-compliance with DIOG 
sections 18.5,8.3.3 and 18.5.8.3.4 and must be reported to OlC as set forth in 2.8.2 below. 

(U//FQUO) Example R: A new SSA arrives in a squad and discovers that his predecessor did 
not conduct file reviews in several of the squad’s Predicated Investigations for several 
months. This is “substantial non-compliance" and must be reported. 

2 .8.1. 2 (IT) Other Non-Compliance 

(U//FOUO) Non-compliance with the DIOG that is not “substantiaf may be reported, but it is 
not mandatary to do SO, If there is uncertainty regarding whether a particular matter is 
substantial or not. the matter should be reported. Nevertheless, whenever non-eompliance is 
discovered ( whether reported or not), appropriate remedial action must be taken by the 
relevant employee; s) to correct the non-compliance, including implementing any preventative 
measures that would help eliminate possible future non-eompliance. 

{UtfFOUQ) Example; An SSA discovers that she conducted a file review 20 days late This 
relates to an administrative requirement and, without more, is not “substantiaf 7 
noncomp] ianee; this does not have to be reported to Old. The SSA should, how r cver, take 
appropriate preventative measures to avoid recurrence. 

2.8.2 (U) Documentation of Substantial non-Compuance 

(U//FGUG) Substantial non-compliance with the DIOG must be reported by EC or subsequent 
form. The EC must include the following information: 

A) (U/JFOUO) The relevant DIOG provixionfs) involved' 

Bi (U/JFOUO) Description of the facts and circumstances (including dates) of the substantial 
non-compliance; 

C) (U/JFOUO) The dale the substantia! non-compliance urn discovered ; 

D) (VffFOUO) Circumstances leading to the discovery of the substantial non-compliance: 

E) (UfJFOUQ) If the substantial non-compticmce was the result of the failure to obtain 
appropriate supervisory approval fe.gr, failure to comply with the requirements of section 

2. 7.4 ) in the context of on emergency departure from the DIOG, a statement at to whether that 
official, or the current official in the appropriate supervisory pas it ion, would have approved 
the action if a timely request had been made hosed on the facts and circumstances then 
known ; 

F) (U//FOUO) Known adverse consequences, if any, attributable to the substantial non- 
compliance, and 

G) (Uf/FOUO) Corrective at remedial aclitmfs) taken or planned to be taken to mi ri gate the 
substantia! non-compliance, as welt as to help prevent such occurrences in the future. 

(L FOUO) Example: An A SAC discovers that a Preliminary" Investigation {PI) was extended 
without obtaining the proper approvals. The failure to obtain appropriate supervisory approval to 
extend the Preliminary Investigation must be reported, and the report must address all of the 
seven areas in A-G listed above. 
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2. 8.3 (U) Reporting A VTHORiTIES 

(U//FOUO> If the substantial non-compliance occurred in a field office, the EC must be 
addressed (a the ADfC/SAC. If the substantial non-compliance occurred at FBI Headquarters 
( FBI HQ), the EC must be addressed to the employee’s Assistant Director. A copy of the EC 
must be provided lu the Office of Integrity and Compliance (QIC) and to the Office of the 
General Counsel (GGC) using file number 3 1 90- HQ^A 156 1245-01C. A copy of the EC shou. 
also be sent ter the investigative file in which the incident occurred. In addition, if the ABIC ^ 
or AD assesses that the non-compliance appears to re fleet intentional or willful misconduct, sl 
must be reported separately by EC to the Internal Investigations Section of the Inspection 
Division!. 


2.8.4 (U) Role of OICand OGC 

{U//FOUQ) OGC will review all reports of substantial non-compliance to determine whether .: 
further action is required in the particular matter. QIC will analyze substantial non -compliant 
reports to determine whether any trends exist in the data and will develop strategics to reduce ’ . 
occurrences of substantial non-compliance, Based upon OtC's analysis of these reports, if OK. 
discovers a systemic problem of non-compliance with the AGG-Dom or DIQG involving 
intelligence activities, either division or FBI wide, OIC must notify OGC/NSLB of this system k 
problem, 

(U//FOU0) Example A; An 1A discovers that a mail cover was used in an Assessment. Because 
mail covers are not permitted to be used in Assessments, this must be reported as a “substantiaf 
non-compliance with the DIQG. 

(U//FOUO) Example B: A supervisor determines that a Type 1 & 2 Assessment was opened 
based solely on the exercise of First Amendment rights. While no supervisory approval was 
required to open the Type I & 2 Assessment, this must he reported as “substantial” non- 
compliance because opening an Assessment based solely on First Amendment activity affects an 
individual's rights and liberties, 

Z 8. 5 (U) Po TEN TIAL 10 B MA TTERS IN VOL VING THE REPORTS OF SUBSTANTIA L 

Non-Compliance 

(U//FOTJO) If the substantial non-compliance is also a potential IOB matter, the mailer must be 
reported in accordance with the requirements and procedures for reporting potential IOB matters 
to OGCYNSLB, Sec Corporate Policy Directive 01 S8D: Guidance on Intelligence Oversight 
Board Matters (Sec 0188D L the Policy Implementation Guide 01 88PG : and see D10G Section 4. 
No additional reporting of the incident needs to be made to OJC under this section, 

2. 8. 6 (U) Repor ting Non-Compua nce with Policy Implement a tion Guides 

(U//FOUO) Substantial non-compliance with DUGG-nelated Pol icy. 'Program Guides must be 
reported by EC or subsequent form to the SAC/ AD 1C* with a copy to the pertinent Headquarters 
Program Manager, and to the OIC and OGC using file number 3390-HQ-AI56T245-QIC. 


Vernon ilatutt. 
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2, 8. 7 (U) REPOR TING N ON- COMPLIA NCE WI TH OTHER FBI POLICIES AND 

Procedures (outside the DIOG) 

I U FOUO) Nothing in this section is intended lo alter, limit, or restrict existing policies that 
require non-compliance to he reported in areas not covered by the DIOG. Employees remain 
responsible to report those other m aliens. Additional information can be found on the Office of 
Integrity and Compliance's webpage . 

2.9 (U) Other FBI Activities Not Limited by AGG-Dom 

iU) The AGG-Dom apply to FBI domestic investigative activities and do not limit other 
authorised activities of the FBI. The authority lor such other activities may be derived from the 
authority of the Attorney General as provided in federal statutes., guidelines, or Executive Orders. 
The scope and approval of these other authorized activities arc addressed in the policies that 
govern the activity and these policies must he relied on when engaging in such activities. 
Examples of authorized FBI activities not governed by the AGG-Dom include, but are not 
limited to, the FBIs responsibilities to conduct background checks and inquiries concerning 
applicants and employees under federal personnel security programs (c,g,, background 
investigations |, FRT physical building security issues, Office of Professional 
Rcsponsibiiity/personnel issues, certain administrative claims/civil actions, the FBI s 
maintenance and operation of national criminal records systems and preparation of national 
crime statistics, and the forensic assistance and administration functions of the FBI Laboratory. 
(AGG-Dom* Part I.D.4.) 

|U) FBI employees may incidentally obtain information relating to matters outside of the FBI's 
primary investigative responsibility. For example, information relating to violations of state or 
local law or foreign law may he incidentally ohlained in the course of investigating federal 
crimes or threats to the national security or in collecting foreign intelligence. Neither the AGG- 
Dom nor the DIOG bar the acquisition of such information in the course of authorized 
investigative activities, the retention of such information, or its dissemination as appropriate to 
the responsible authorities in other jurisdictions. (See Section AGG-Dom, Fart II and Part 
VLB) 


2.10 (U) Use of Classified Investigative Technologies 

III) Inappropriate use of classified investigative technologies may risk the compromise of such 
technologies, Flenee, in an investigation relating to activities in violation of federal criminal law 
that does not concern a threat to the national security or foreign intelligence, (he use of such 
techno logics must be in conformity with the Procedures for the Use of Classified Investigative 
Technologic!; in Criminal Cases (AGG-Dam, Part V.B.2), Operational Technology Division 
(OTD) Domestic Technical Assistance (DTA) Policy Implementation Guide (PG), and any other 
FBI policies concerning such technology use. 

2.11 (IT) Application of AGG-Dom and DIOG 

i L.' . KGLOl The AGG-Dom and DIOG apply lo ail FBI domestic investigations and operations 
conducted by an "FBI employee” or an FBI confidential human source (CHS), when operating 

2-15 . , 
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pursuant to the tasking or instructions of an FBI employee. The term "FBI employee*’ includes, 
but is not limited to. an operational, ■‘kirn ini strati vc professional support person, intelligence 
analyst special agent, task force officer (TFO), task force member (TFM), task force participant 
(TFP), detailee, and FBI contractor. Both an ‘FBI employee" and a CHS, when operating 
pursuant to the tasking or instructions of an FBI employee, are bound by the AGG-Dom and 
DIOG- In the DIOG, "FBI employee" includes all personnel descriptions, if not otherwise 
prohibited by law or policy. Foresample, if the DIOG states that the "FBI employee" is 
responsible for a particular investigative activity, the supervisor has the flexibility io assign that 
responsibility to any person bound by the AGG-Dom and DIOG (e.g., agent, intelligence analyst* 
task force officer), if not otherwise prohibited by law or policy, 

(U//FOUQ) TFOs. TFMs, TFPs, detailees. and FBI contractors are defined as "FBI employees” 
for purposes of application of the AGG-Dom and DIOG. However, for overt representational 
purposes, TFOs. TFMs, TFPs. detailees and FBI contractors should identify themselves as 
employees of their parent agency and. if appropriate and necessary, affiliated with a particular 
FBI investigative entity, such as the JTTF, etc, A CHS is likewise bound by (he AGG-Dom. 
DIOG, AGG-CHS, and other applicable CHS policies when operating pursuant to the tasking or 
instructions of an FBI employee; however, the FBI CHS is not an employee of the FBI 

(U//FOUQ) TFOs, TFMs, TFPs, detailees, and FBI contractors are defined as "FBI employees” 
only for purposes of the AGG-Dom and DIOG. This inclusive definition does not define federal 
employment for purposes of the Federal Tort Claims Act, 28 U,S,C, §§ 1 346(b), 240] , and 1671 
et seq.; the Federal Employees Compensation Act, 5 U.S,C, § 8 10 1 et seq.; the 
Intergovernmental Personnel Act 5 U.S.C. § 3374 et seq, or any other law. 

(U//FQUO) FBII IQ division FGs may not contradict, alter or otherwise modify the standards 
established in the DIOG. 
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3 [Li) CORE VALUES, ROLES, AND RESPONSIBILITIES 


3.1 (U) The FBI's Core Values 

I U) The FBI’s core values guide and further our mission and help us achieve our many goals. 

The values do not exhaust the many goals we wish to achieve, hut they eapsulaic the goals as 
well as can be done in a lew words. The FBI’s core values must be fully understood, practiced, 
shared, vigorously defended, and preserved. The values are; 

A) fU) Rigorous obedience to the Constitution of the United Scales 

B) (U) Respect for the dignity of all those we protect 

C) (U) Compassion 

D) (U) Fairness 

E) (U) Uncompromising personal integrity and institutional integrity 

F) (U) Accountability by accepting responsibility for our actions and decisions and their 
consequences 

G) (U) Leadership, by example, both personal and professional 

(U) By observing these core values, we achieve a high level of excellence in performing the 
FBI's national security and criminal investigative functions as well as the trust of the American 
people. Our individual and institutional rigorous obedience to constitutional principles and 
guarantees is more important than the outcome of any single interview-, search for evidence, or 
investigation, Respect for the dignity of all reminds us to wield law enforcement powers with 
restraint and to avoid placing our self interest above that of those wc serve. Fairness and 
compassion ensure that we treat everyone with the highest regard for constitutional, civil, and 
human rights. Personal and institutional integrity reinforce each other and are owed to our Nation 
in exchange for the sacred trust and great authority conferred upon US. 

(U) We who enforce the law must not merely obey it. We have an obligation to set a moral 
example that those whom we protect can follow, Because the FBI’s success in accomplishing its 
mission is directly related to the support and cooperation of those wc protect, these core values 
are the liber that holds together the vitality of Our institution. 

3. LI (U) Compliance 

(L?) All FBI personnel must folly comply with all laws, rules, and regulations governing FBI 
investigations, operations, programs and activities, including those set forth in the AGG-Dom. 
We cannot, do not, and will not countenance disregard tor the law for the sake of expediency in 
anything we do. The FBI expects its personnel to ascertain the laws and regulations that govern 
the activities in which they engage and to acquire sufficient knowledge of those laws t rules, and 
regulations to understand their requirements, and to conform their professional and personal 
conduct accordingly. Under no circumstances will expediency justify disregard for the law. FBI 
policy must be consistent with Constitutional* legal, and regulatory requirements. Additionally, 
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the FR] must provide sufficient training to affected personnel and ensure that appropriate 
oversight monitoring mechanisms are in placc. 

(U//FOUO) In general, the FBI requires employees to report known or suspected failures to 
adhere to (he law, rules or regulations by themselves or other employees, to any supervisor in the 
employees’ chain of command; any Division Compliance Officer any Office of the General 
Counsel (OGC) Attorney; any Inspection Division personnel; any FRI Office of Integrity and 
C ompEiance (QIC) staff; or any person designated to receive disclosures pursuant to the FBI 
Whistleblower Protection Regulation (28 Code of Federal Regulations $ 27.1 ], including the 
Department of Justice (DGJ) Inspector General. For specific requirements and procedures for 
re-porting “departures” and "non-compliance^ with the AGG-Dom on the DIOG, see DIOG 
Section 2. 

3.2 fll) Investigative Authority, Roles and Responsibility of the 
Director's Office 

3.2. 1 (U) Director ’sA umOMTY, Roles and Responsibili ty 

( U//FOUO) The Director's authority is derived from a number of statutory and regulatory 
sources. For example. Sections 53 I through 540a of Title 2ft. United States Code (U.S.C.), 
provide for the appointment of the Director and enumerate some of his powers. More 
importantly, with regard to promulgation of the DIOG, Section 301 of Title 5. U.S.C., authorizes 
the head of an Executive department to "prescribe regulations for the government of his 
department, the conduct of its employees, the distribution and performance of its business, and 
the custody, use, and preserv ation of its records, papers, and property," The Attorney General, as 
head of the DOJ, has delegated the authority in Section 301 to the Director in a variety of orders 
and regulations* Foremost among these delegations are Subparl P and Section 0.137 of Title 2ft, 
Code of Federal Regulations (C.F.R.). This DIOG is promulgated under the authority thus 
delegated. 

{LLYFOUO) The Director's role and responsibilities under the AGG-Dt>m and DKXi. include, 
among others,. the approval or denial of departures from the AGG-Dpm,, Undisclosed 
Participation (UDP) (see DJOCS Section 16) and Sensitive Operations Review Committee 
(SORC) matters (see DKXi Section 10). 

3.2.2 (U) Deputy Director 's A uthqrity. Roles and Responsibility 

(LV/FOUO) The Deputy Director is the proponent of the DKXL and in that position has oversight 
regarding compliance with the DKXi and subordinate implementing procedural directives and 
divisional specific PCs. The Deputy Director is also responsible for the development and the 
delivery of necessary training and ihe execution of the monitoring and auditing processes. 

( IJ//FOUO) The Deputy Director works through the Corporate Policy Office (CPO) to ensure the 
following; 

A) (U//FOUO) The DIOG is updated as necessary lo comply with changes in the law, rules, or 
regulations; 
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ft) (U/TOUO) The DIOG is reviewed every three yews after the effective date of the 201 3 
revision* and revised as appropriate. This mandatory review schedule, however* does not 
restrict the CPO. which is responsible for ail corporate policy matters* from working with FBI 
Headquarters (FBIHQ) divisions and field offices in she meantime to make policy revisions to 
the DIOG and the PGs whenever necessary and appropriate during ibe three year period, The 
CPO may also make technical or non-substantive language or formatting changes to the 
DIOG, as necessary, provided those changes clarify the meaning without altering the 
substance of the DIOG: 

C) (UjOTOUO) Existing and proposed investigative and administrative policies and PGs comply 
with the standards established in the AGG-Dom and DIOG, On behalf of (be Deputy Director, 
the CPO has the authority, following coordination with the QIC and OGC, to modify or 
remove any provision Of existing or proposed investigative or administrative policies or PGs 
determined to violate, contradict, or otherwise modify ihe intent or purpose of any provision 
or standard established in the AGG-Dom or DIOC: and 

D) (U//FOUQ) If the CPO makes any changes to the DIOG or other policy pursuant to DIOG 
Sections 3.2.2.B and/or 3.2.2.C above, the CPO will immediately advise by c-matl ali FBIHQ 
and field office Division Policy Officers (DPO)of such changes ami all DPOs must further 
advise their respective FBI employees pf such changes. The electronic version of tine DIOG 
maintained in the CPO's Policy and Guidance Library is the official current policy of Ihe FBI. 

3,3 (U) Special Agent/Intelligence Analyst/Task Force Officer 

(TFG)/Task Force Member [TFM)/Task Force Participant (TFP)/FBI 
Contractor /Others - Roles and Responsibilities 

3.3. 1 (U) Roles a m Responsibilities 

(U//FOUO) Special Agents, analysts, TFO, TFM, TFP, FBI contractors and others bound by the 

AGG-Dom and DIOG must: 

3.3. 1.1 (U) Training 

(U//FQUO) Obtain training on the DKXi standards relevant to his/her position and perform 
activities consistent with those standards; 

3.3. 1.2 {U) Investigative Activity 

(U//FGUQ) Ensure all investigative activity complies with the Constitution, Federal law. 
executive orders. Presidential; Directives, AGG-Dom, other Attorney General Gui delines 
(AGG)*, Treaties, Memoranda of Agreement'Ll ndersianding, the DIOG, and any other 
applicable legal and policy requirements (if an agent analyst TFO, or other individual is 
unsure of the legality of any action, he/she must consult with his/her supervisor* the Chief 
Division Counsel (CDC) or OGC): 

3.3. 1.3 (tl) Privacy and Civil Liberties 

(U//FGUG) Ensure that civil liberties and privacy are protected throughout tlie Assessment or 
investigative process; 
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3. 3.1 .4 ( 11} Protect Rights 

(U//FOOO) Conduct no investigative activity baaed solely on the exercise of First 
Amendment activities (i.e., the free exercise of speech, religion, assembly, press or petition) 
or on the race, ethnicity, national origin or religion of the subject (See DIOG Section 4); 

3.3. 1.5 fU) Compliance 

(U//FOUO) Ensure compliance with the DIOG, including standards for opening, conducting, 
and dosing an investigative activity; collection activity; or use of an investigative method, as 
provided in the DIOG; 

3,34,6 (U) Report Non-Compliance 

(U//FOUO) Comply with the law, rules, or regulations, and report any non-compliance 
concern to the proper authority. For specific requirements and procedures for reporting 
departures and non-compliance with the AGG-Dom and the DIOG, see DIOG Sections 2.6 - 
2 . 8 ; 


3.3. 1.7 (U) Assist Victims 

(U//FOUO) Identify victims who have suffered direct physical, emotional, or financial harm 
as result of the commission of Federal crimes, offer the FBI's assistance to victims of these 
crimes and provide victims 1 contact information to the responsible FBI Victim Specialist 
(VS), The VS is thereafter responsible for keeping victims updated on the status of the 
investigation to the extent permitted by law. regulation, or policy, unless the victim has opted 
not to receive assistance. The FBI's responsibility for assisting victims is continuous as long 
as there is an open investigation (see the Office of Victim Assistance FG ): 

3.34.8 (U) Obtain approval 

(U//FOUQ) Ensure appropriate supervisory approval is obtained for investigative activity as 
required in the DIOG. Obtain and document oral approval as specified in Section 3.4.2. 2 
below. Self-approval of DIOG activities is not permitted. See “No Self-Approval Rule*' set 
forth in Section 3, 4.2, 3 below; 

3.34.9 f U) Attri bute I nform atlo n to Gri gi n ator in Reports 

(U.VFOUO) Ensure that if the originator of information reported to the FBI characterizes an 
individual, group, or activity in a certain way, FBI records (i.e„, 302s, ECs t LHMs, etc.) 
reflect that another party, and not the FBI, is the originator of the characterization. Example: 
An FBI document should state; s< The complainant advised that the subject was prejudiced and 
motivated by ethnic bias' 1 rather than “The subject was prejudiced and motivated by ethnic 
bias;” 

3.3.1,10 [if] Serve as Investigation (XasiO Manager 

(UA FOUO) If assigned responsibility tor an investigation, manage all aspects of that 
investigation, until it is assigned to another person, It is the employee's, responsibility to 
ensure compliance with all applicable laws, rules, regulations, and guidelines, both 
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investigative and administrative, from the opening of the investigation through disposition of 
the evidence, until the investigation is assigned to another person; 

3.3.1.11 ^UJ Create and Mai nt ain Records/ Files 

(U/VFOUO) Create and maintain authentic, reliable, and trustworthy records, establish Hies, 
set leads, supervise investigations, index documents, and retain and share information, as 
specified in DICKS Section 14 and Appendix J; 

3.3,02 [IJJ Index Documents 

(U//FOUO) If assigned responsibility for an investigation, index information in documents. 
Current guidance for indexing documents may be found in DIOCi Appendix J and on the 
RMD website: http:/.'lionie. Itai nct.tbi /do/nnd/Pagcs/Dejault.asp s : 

3.3.1.13 [U> Seek Federal Prosecution 

|U//FQUO) Prefer Federal prosecution rather than state-local prosecution. An FBI employee 
may protect the FBI’s resources and interests when discussing investigations with the United 
Slates Attorney’s Office (US AO) by accurately representing the lime and effort spent on an 
investigation. The US AO should be aware of this information prior to deciding whether 
he,' she will decline prosecution in favor of handling by local authorities. Criminal 
investigations conducted by the FBI are designed to obtain evidence for prosecution in 
Federal court and not in state or local courts; and 

3.3.1.14 (U) Retain Notes Made During An Investigation 

(U//FOUQ) Retain in the investigative file ( I A envelope) the following types of material 
developed when interviewing witnesses: 

A) (U) Statements signed by the witness. 

B) (U) Written statements, unsigned by the witness, but approved or adopted in any manner by 
the witness. 

C) (U) Original notes of interview with prospective witnesses and/or suspects and subjects. That 
is, in any interview where preparation of an FD-302 is required (an interview where it is 
anticipated the results will become the subject of court testimony) the handwritten notes must 
be retained. 

D) (U} Dictating interview notes on audiotape in lieu of handwritten notes may be viewed by a 
court as "original notes” and, therefore must be retained. Dictation on audio lape of the results 
cfan interview Ibr transcription lou final FD-302 is not "original note’ 1 material acid need not 
be retained. 

E) (U) An FBI employee's notes made !c record his/her own finding, must always be retained, 
Such notes include, but are not limited lo. accountant's work papers and notes, covering 
matters such as crime scene searches, laboratory examinations, and fingerprint examinations. 
If there is a question whether notes must be retained, resolve the question in favor of retaining 
the notes. 
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3.3. 2 (V) Definitions of Task Force Officer (TFO), Task Force Member 

(TFM), Am Task Force Participant ( TFP ) 

(U//FOUO) It is required in some situations For the sponsori ng agency of the TFO, TFM and 
TFP io enter into an MOL 1 with the FBI that governs the activities of the Task Force. For 
purposes of the DIOG, TFO. TFM. and TFP are defined as follows: 

3.3.2. 1 (UJTask Force Officer (TFO) 

(U//FOUO) An individual is a TFO when aM of the following apply: 

A) (U//FOUQ) The individual is a certified Federal, stale, local, or tribal law enforcement officer 
U) (U//FOUO) The individual is authorized to carry a firearm; 

C) (U//FGUG) The individual is currently deputised under either Title 2 1 or Title I S of the 
U.S.C.; 

D) (U/'/FGUO) The individual has been issued Federal law enforcement credentials; 

E) (UATOUOl The individual is assigned to the supervision of an FBI led task force; 

F) (U//FCKJO) The individual has a security clearance recognized by the FBI that is currently 
active; and 

G) { LI//FGUO) The individual is authorized to have access to FBI facilities. 

(U//FOUO) An FBI TFO is mandated to attend all DlOCi related training, and is bound by all 
rules, regulations, and policies set forth in the DIOG when acting in the capacity as art FBI 
TFO 

3.3.2. 2 fUl Task Force Member (TFM] 

(U//FOUO) An individual is a TFM w r hen all of the following apply; 

AHU//F0UO] The individuai is an employee of a Federal, slate, local, or tribal agency; 

B) (U//FQUQ) The individual is assigned to the supervision of an FBI ted task three: 

C) (U//FOUQ) The individual has a security clearance recognized by the FBI that is currently 
active; and 

DHU//F0UO) The individual is authorized to have access to FBI facilities. 

(U//FOUO) An FBI TFM is mandated to attend ail DlOCi related training, and is bound by all 
rules, rtgulalions, and policies set forth in the DIOG when acting in the capacity as an FBI 
TFM. 

3 .3 .2. 3 (U ) Tas k Force Participant (T FP J [i .e,, Task Force Liaison ) 

(U//FOUO) An individual is a TFP when he, 'she participates on an FBI-led task force and 
docs not otherwise qualify as a TFO or TFM. A TFP is bound by all rules,, regulations, and 
policies set forth in the DIOG when acting in the capacity as an FBI TFP. DIOG related 
training for an FBI TFP may be required by the head of the office/di vision that governs the 
activities of the Task Force. 
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3.4 [U] Supervisor Roles and Responsibilities 

3 A. 1 ( U) Super visor Defined 

(U) The term Supervisor” as u&ed in the DIOG includes (whether in a Field Office or FB1HQI 
the following positions, ora person acting in such capacity: 

A) (U) Supervisory Special Agent (5SA), 

B) (U) Supervisory Senior Resident Agent (5SRA), 

C) (U) Supervisory Intelligence Analyst (SI A), 

D) (LT) Legal Attache (Legal), 

E| (U) Deputy Legal Attache I DI M), 

F) (U) Unit Chief (UC J T 

G) (U) Assistant Special Agent in Charge (ASACX 

H) (U) Assistant Section Chief (ASC)> 
l> (U) Section Chief (SC), 

J) (U) Special Agent in Charge (SAC), 

K) (U) Deputy Assistant Director (DAD). 

L) (U) Assistant Director ( AD) t 

M) (TJ) Assistant Director in Charge (ADIC), 

N) [U) Associate Executive Assistant Director (A/E AD). 

O) (U) Executive Assistant Director (EAD). 

P) (U) Associate Deputy Director { ADD), and 

Q) (U) Deputy Director (DDL 

(U) The term ‘‘supervisor” is also intended to include any other FBI supervisory or managerial 
position that is not specifically listed above hut is equal in rank and/or responsibility to these 
listed positions, (Note: TFOs/TFMs cannot he supervisors.) 

3. 4. 2 (U) Super visor Responsibilities 

3.4.2. 1 [U] A pproval/ Review of Investigative oh Collection Activities 

(LWOUG) Anyone in a supervisory role who approves. Te views investigative or collection 
activity must determine whether the standards for opening, approving, conducting, and 
closing an investigative activity, col leu Lion activity or investigative method, as provided, in the 
DIOG. have been satisfied. 

3.4.2 .2 [U> Or a l Authq rity / Approval 

(U//FOUO) Unless otherwise specified by the AGG-Dom or FBI policy, any 
Buthority/approval required in the DIOG necessary to conduct investigative activities may be 
granted orally by the appropriate approving official. Should such oral authorisation be 
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granted, appropriate written documentation of the oral authorization must be documented by 
the FBI employee to the authorizing official as soon as practicable, but rot more than five 
business days after the oral authorization. The effective date of any such oral authorization is 
the date on which the oral authority was granted, and that date and the name of the approving 
official must be included in the subsequent written documentation. 

(U//FOUO} Supervisors are not permitted to se!f-approve investigative or intelligence 
collection activity or methods in assessments or investigations assigned to them as case agents 
or analysis. An independent evaluation and approval of these activities must be obtained 
including the opening and closing of any Assessment or Predicated Investigation. Sec Section 

3.4. 2. 3 below. 

3.4.2.3 (U) No Self Approval Rule 

(U//FGUQ) When approval/authority is required in the DIOG to open, utilize an investigative 
method, close, or perform any administrative requirement ( i.c. initial paperwork to a tile, 
perform a file review, etc ), an approving official (supervisor) may not “sclf-approve" his/her 
own work or activity. An independent evaluation and approval of these activities must be 
obtained, including the opening and closing of any Assessment or Predicated Investigation. 

(U//FOUO) Example: An SSA/SIA properly designates a relief supervisor on the squad to act 
as the SSA/SIA while the supervisor is on leave. The relief SSA/SIA may not approve 
anything related to his/her own investigations/work because supervisors are not permitted to 
sclf-approvu investigati ve or intelligence collection activity or methods in files assigned to 
them selves. 


3. 4^2. 4 (U) Ensure Compliance with LfS. Regulations and other Applicable Legal 

AND Policy Requirements 

(U//POUO) Supervisors must monitor and take reasonable steps to ensure that all 
investigative activity, CO l lection activity and the use of investigative methods comply with Ihc 
Constitution, Federal law, Executive Orders. Presidential Directives, AGG-Dom, other AGG, 
Treaties. Memoranda of Agreemeni/Understanding, the DJOG,. and any other applicable legal 
and policy requirements. 

3,4.2. S (U) Training 

(U//FQUO) Supervisors must obtain training on the DIOG standards relevant to his/her 
position and then conform decisions to those standards. Supervisors must also take reasonable 
steps to ensure that all subordinates have received the required training on the DIOG 
standards and requirements relevant to the subordinate's position. 

3.4.2 .6 ( U ) Protect Civil Liberti es an d Pri v acy 

(U//FQUO) All supervisors must Lake reasonable steps to ensure that civil liberties and 
privacy are protected throughout the investigative process. 
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3.4.2.7 (U) Report Compliance Concerns 

(U//FOUO) IF a supervisor encounters a practice that does not comply, or appears not to 
comply, with the law, rules, or regulations, the superv isor must report that compliance 
concern to the proper authority and, when necessary, lake action to maintain compliance. For 
specific requirements and procedures lor reporting departures and non-compliance with the 
AGG-Dom and the DIOG, see Sections 2.6 - 2, 8. 

3 >4,2,0 (U) Non-Retaliation Policy 

(U//FOUO) Supervisors must nol retaliate or take adverse action against persons who raise 
compliance concerns. (See CPD 003 2D, 02/ 1 1/2008 for nom retaliation policy ! 

3 .4.2.0 (U) Create an d M a entai n Reco rds/ Fi les 

(U//FOUO) Supervisors must ensure that FBI employees create and maintain authentic, 
reliable, and trustworthy records, establish files, set leads, supervise investigations, index 
documents, and retain and share information, as specified in DIOG Section 14. 

3. 4.3 (U) Deleg a tion and Succession a v the FBI 

(U//FOUO) The ability to exercise legal authority within the FBI through delegations of legal 
authority and orderly succession to positions of authority is set forth in the Succession and 
Delegation Policy . 

3.1. 3.1 [U] Delegation 

(U//FOUO) As used in the DIOG, the term “delegation” refers to the conveyance of authority 
to another official (either by position or to a named individual). FBI legal authority is 
generally delegable one supervisory level unless expressly permitted,, prohibited, or restricted 
by law, regulation, or policy. For example, an SAC may delegate his/her authority to approve 
Sensitive Investigative Matters (SIMs) to an ASAC, but the ASAC cannot further delegate 
this authority to an SSA. Delegations will continue in effect until modified, revoked, 
superseded, the position no longer exists, or the named individual vacates the position, 

(U'VFOUQ) A supervisor may only delegate authority to another supervisor One level junior to 
himself nr herself, Unless specified otherwise |e.g.. an ASAC may delegate authority to an 
SSA). SACa may, however, restrict delegations within their field offices, i.e,, an SAC may 
prohibit ASACs from further delegating authorities that have been assigned to them. 

(U//FOUO) SSAs and Supervisory Intelligence Analysts (S1A) cannot “delegate” their 
authority because they are the first level of supervisory responsibility; however, a relief 
supervisor may exercise the SSA’s authority when serving us the “acting” SSA (c.g„ when the 
SSA is absent or unavailable). In the absence of the immediate approval authority, a 
supervisor at the same or higher level than that required may approve a particular activity 
(c.g., an Special Agent requests that his/her ASAC or SAC approve a Preliminary 
Investigation because the Agenfs SSA is on a temporary duly assignment). 
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3.4*3 .2 ( U) Successi □ n : Acts ng Su fervisorv Authority 1 

(U//FOUO) As used in the DEQG, die term "succession" refers to the process by which an 
official assumes the authorities and responsibilities of an existing position, typically when the 
incumbent is absenl, unavailable, unable to carry out official responsibilities, or has vacated 
the position, A person who temporarily succeeds to a position is referred to as “acting" in that 
position. 

(U//FOUO)The FBI follows the general rule, recognized In law. that employees properly 
designated as "acting" in a position exercise the lull legal authorities of that position, unless 
specifically precluded by higher authority or by an applicable law, regulation, or policy. 
Accordingly, unless expressly precluded, any authority vested in an FR3 supervisor pursuant 
to the DEQG may be exercised by someone who occupies that position in an acting status. An 
employee may be designated to an acting position either through a succession plan or ad hoc 
designation. See the FBI Succession and Delegation Policy for additional details. 

3*4.3, 3 (U) Docum entation 

(U//FOUO) Delegations of authority as well as succession plans and ad hoc designations must 
be documented in writing and maintained in an appropriate administrative file whenever 
practicable, unless specifically required by the DIOG- An administrative tile has been created 
to maintain documentation of delegations of authority and ad hoc designations {3 I9W4-IQ- 
A14$7f»9H-xx with the last two alpha characters designating particular Held office, FBIItQ 
Division or Legal). An administrative file has also been created to maintain documentation of 
succession plans (3 I9X'HQ-A153S38?-XX with the last two alpha characters designating the 
particular field office, FBIHQ Division or Legal). Documentation of acting authority may 
take place subsequent to the actual ad hoc designation. For example, an SSA orally advises 
his principal relief supervisor tha< he/she has an emergency and will not be able to come into 
the office. The ad hoc designation of the relief supervisor as acting SSA can be documented 
upon the SSA's return to the office, Failure to document an ad hoc designation does not 
invalidate the designation but may result in difficulty proving the appropriate exercise of 
authority if required to do so. (See Section 3.4.2.2 above concerning oral authorizations and 
related documentation requirements). 

3.4.4 (U) File Reviews and j ustifica tion Re views 

3,4, 4.1 [U] Overview 

(L7/FOUQ) The file review- is designed to ensure investigative and intelligence activities arc 
progressing adequately and conducted in compliance with applicable statutes, regulations, and 
FBL DOJ policies and procedures. As a management tool, the file review process has proven 
effective for operational program oversight, tracking invest igalive and intelligence collection 
progress* ensuring investigative focus, and reduction of risk. 

(U/'/FOUOl Supervisory review of investigative files is especially important with regard to 
tracking the progress and development of new employees, It provides an opportunity for 
supervisors to guide employees on how- properly to manage and document investigation files, 
and to use and document investigative methods, while emphasizing the importance of 
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compliance and recognition of risk. In addition, the file review process is an opportunity to 
begin to evaluate an employee's level of performance and to identify his/her strengths and 
weaknesses. 

(U//FOUQ) File reviews help supervisors to ensure their ofTiee is effectively supervising 
activities in its own territory and monitoring investigative activity carried out on their behalf 
in other field offices. For example, a supervisor may use a file review as a reasonable step to 
ensure the employee assigned an investigation has addressed all logical investigation in a 
timely manner, or to ensure the employee has successfully set necessary leads for other 
offices or other employees within his/her own office, 

3 .4.4.2 (u) Types of Fills/ Investigations Retiring Flu- Reviews and Justification 
Reviews 

(U//FOUO) File review s must be conducted for all Predicated Investigations, including 
investigations placed in Spending inactive" status, un addressed work files, and Types 3 
through 6 Assessments, Type I & 2 Assessments must have a 30 day justification review's, as 
specified below . 

3 .4.4. 3 (U) Freque nc y of Fi le Re vi e ws 

(U//FQUQ) Supervisors must adhere to the following lime frames for file reviews: 

A) (U//FOLO) 9(1 Hays The supervisor must review the files for all investigations {including 
pending Predicated Investigations, pending inactive investigations, unaddressed work files, 
and Type 3 - fi Assessments) assigned to each agent, Resident Agent, TFO, and IA every 90 
calendar days. 

II <U//FOUO) 30 Adiiilienal Days: All documentation ol she required reviews must he 
completed within 30 calendar days of the file review date. 

B] (UtfFOUG) fill Bays - The supervisor must review the files for all investigations (including 
pending Predicated Investigations, pending inactive investigations, unaddres&ed work files, 
and Type 3 - 6 Assessments) assigned to eaeh probationary employee (ageni and l A) every 60 
calendar days. 

1 1 (LV/F0UG) 30 Additional Days: All documentation of the required reviews must he 
completed within 30 calendar days of the file review daie. 

3. 4.4. 4 JUJ Frequency gf Justification Reviews 

JWFQUO) In addition to file reviews, every 30 days supervisors must complete “justification 
reviews" for Type I & 2 Assessments, as specified below. 

3.4*4, 5 [U J De legation of Fi le R e vie ws 

(U//FOUO) Thorough, complete and well conducted file reviews are an important part of the 
compliance regime, provide valuable and needed information for purposes of evaluating the 
performance of employees, and are critical to the effective management of a squad. For those 
reasons, file reviews are an important duty and responsibility for Supervisors, and Supervisors 
arc discouraged from routinely delegating these reviews. Beeause, however, conducting a file 
review- is an important developmental opportunity for primary relief supervisors, file review's 
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may be conducted hv a duly designated acting supervisor or duly designated primary relief 
supervisor. Acting supervisors may conduct rile reviews just as they would conduct any other 
supervisory duty while functioning in an acting capacity. Primary relief supervisors may 
conduct file reviews; however, when they do so t the next required file review must be 
conducted by a supervisor or duly designated acting supervisor. In other words, every other 
file review of any given investigative file must be conducted by a supervisor or duly 
designated acting supervisor. Acting supervisors may not review their ow n files under any 
circumstances. Acting supervisors must either reassign their investigations or have their 
investigations reviewed by another supervisor or an A SAC, 

3. 4.4. 6 (U) File Review Requirements for Predicated Investigations & 

Assessments 

(U//FOUO) A file review or justification review must be; conducted in person or by telephone 
when necessary (e g., FBI employee is TDY or in a remote Resident Agency (RAj); 
conducted in private; and documented as specified below, 

(Lf 'VFGUO) The file review process requires the supervisor to review the investigative files 
assigned to the employee, discuss past progress and future objectives, and document that 
information on the Investigative Case Management (ICM) Case Review Sheet generated by 
ACS (commonly referred to as the "file review sheet"!. Discussion and documentation must 
also include the progress of the investigation.' Assessment since the previous file review and 
the projected work for the time period until the nest file review, 

{U//FOUO) When reviewing the employee's assigned investigative files, the supervisor 
should consider the following; 

A) (U//FOUD) Whether subjects) have been indexed in compliance with indexing guidelines; 

Bl (U//FOUO) Whether statistical accomplishments. i.c„ FD-515 and FD-542 h have been entered 
within established timeframes; 

C} (U//FOUO) Whether evidence has been stored and disposed of properly and whether 
documentation has been completed according to evidence control policies; 

D) (L//FOUO) Whether leads have been covered within established deadlines; 

El (U//FQUO) Whether any National Security Letters have been issued in accordance with 
policy, including whether responsive materials have been appropriately examined (c.g., 
examined for overproductiocii; 

F) (U//FOUO) Whether any Federal Grand Jury Subpoenas have been issued in accordance with 
policy, including whether responsive materials have been appropriately examined (e.g.,. 
examined for overproduction!; 

G) (U//FOUO) Whether any Administrative Subpoenas have been issued in accordance with 
policy, including whether responsive materials have been appropriately examined (e.g., 
examined for overproduction!; 

HHU//FOUO) Whether any Federal Grand Jury Materials covered by Rule be art properly 
marked and handled, including being appropriately restricted in ACS; 

I) (LUYFOUG) Whether the Watchlist status of any subjects! has been appropriately 
documented; 
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J) (WFQUQ) Whether the stains of the EYeliminary Investigation is current t e,g r , has not 
expired or will not expire before the next file review k 

KL) (U//FOUO) Whether any Potential Intelligence Oversight Board (IQB) violations h&ve been 
reported in accordance with policy; and 

L) (U//FOUO) Whether relevant asset forfeiture statutes have been applied and their use 
documented, 

(U//FOUO) Superv isors must evaluate the proper use of investigative methods and ensure 
they arc appropriately documented in the file. Leads and administrative actions must be 
documented in ECs, When evidence has been recovered, the supervisor must review all FD* 

1 92s to ensure the evidence was handled appropriately. The supervisor should use the file 
review process as an opportunity to determine whether the employee has adequately used 
liaison and external contacts to further the investigation' Assessment, In addition, the 
supervisor must assess whether the employee needs additional assistance, training, guidance, 
or other resources to successfully advance the investigati on/ Assessment. 

(U'/FOUO) The intelligence aspect of every investigation must be scrutinized during the file 
review process. The supervisor must determine whether the employee understands his/her 
responsibilities relative lo intelligence collection and reporting and has ensured that 
investigative and intelligence aspects of each investigation complement each other. This 
includes examining whether the employee has adequately collaborated with the field office's 
intelligence component and exploited his/her investigations to obtain information relevant to 
standing intelligence collection requirements. The supervisor must review the tiles for 
potential intelligence collection and sharing opportunities, both crass-programmatic and 
interagency, The file review must document whether applicable intelligence products such as 
intelligence reports, bulletins and assessments, etc., have been or should be drafted based on 
investigative and intelligence information collected during the investigation. 

(U//FOUQ) The supervisor must also evaluate whether the employee has Keen in 
communication with FBIHQ division entities, it’ appropriate, with respect lo his/her 
in vestigati ve/intelligence activities. The supervisor must also evaluate whether the employee 
has coordinated with FBIHQ to obtain any special authomies/eoneurrenees needed from 
DOJ/FBI components and other govern mental agencies (eg., CIA. DOS, and COD ). 

(U//FOUO) The supervisor must consider and take into account the employee's collateral 
duties, such as SWAT, ERT, HAZMAT, Hostage Negotiator, training, TDY assignments and 
other activities constituting official business that could limit his/her ability to address his/her 
assigned caseload. The supervisor must take into account planned annual and sick leave, 
holidays and similar time constraints when estimating the employee's overall work 
responsibilities for the next 90 day period. 

(U//FOUO) The supervisor must evaluate whether the employee is acting within all applicable 
statutes, regulations, and FBI/ DOJ policies and procedures. Supervisors must keep in mind 
that how the employee accomplishes his or her tasks is just as important as whether he or she 
accomplishes them. Any compliance concerns must be immediately referred to the field 
office's compliance officer for discussion regarding what additional actions should be taken. 
For specific requirements and procedures for reporting departures and non-compliance with 
the AGG-Dotm and the DIOG, see Sections 2,6 - 2,8. 
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of the file review, the supervisor must ensure that the employee 
objectives to be accomplished over the next 90 calendar days and must 
: _r-.vm specifically those expectations on the file review sheets, At this time the supervisor 
-Tiu*i also prepare an FD-865 (Performance Summary Assessment! for Special Agents per 
Corporate Policy Notice (CPN) 0G43N. For all other employees, the supervisor has the option 
to prepare an FP-865. 

(LV/FOUO) The supervisor must be diligent about documenting all aspects of the file review- 
on the file review sheet and setting appropriate ticklers. 

3.4.4 7 (If) Type 1 & 2 Assessments- Justi fixation Reviews 

(U//FQUO) Supervisors must conduct 30-day justification reviews for Type I & 2 
Assessments, Follow ing the end of the 3 (May period, the agent, TFO, or IA and the 
supervisor have up to 10 calendar days to complete all aspects of the justification review and 
lo document The review. These justification reviews must address the follow ing Assessment 
Review Standards ( ARS): 

A) (U//FOUO) has progress been made toward achieving the authorized purpose and clearly 
tie fined objectives); 

B) (U//FOUO) were Lhe activities thal occurred in ihe prior 30 calendar days appropriate and in 
compliance with applicable DIOG requirements; 

C) (U/TOLf 0 } is it reasonably likely that information will be obtained thal is relevant lo lhe 
authorized purpose and dearly defined objcelivc(s), thereby wananitnEiin extension for 
another 30 calendar days; 

D) (U//FOUQ) has adequate predication been developed to open a Predicated Investigation; and 

E) (U//FGUQ} should the Assessment be terminated. 

(LV/FOUG) The justification review, including the ARS requirements, must be documented in 
the FD-7 1 or the FD-7 la (Guardian). 

3 .4,4.8 (U) Type 3, 4, and 6 Assessments - Assessment Review Standards (ARS) 

(LV/FOUO) In addition to the file review procedures documented on the File Review Sheet set 
forth above, supervisors are required to evaluate Type 3, 4 and 6 Assessments using the 
below- listed ARS during the file review every 90 calendar days (60 calendar days for 
probationary employees); 

A) (U/.TOL r Oj has progress been made toward achieving the authorized purpose and clearly 
deflned objectives); 

B) | U//FOUG) were lhe activities that occurred in the prior 60 or 91) calendar days appropriate 
and in compliance with applicable DIOG requirements; 

C) (U//FOUQ} is st reasonably likely that information may be obtained that is relevant to the 
authorized purpose and clearly defined objectives), thereby 7 warranting an extension For 
another calendar days; 

D) (U.7FQUO) has adequate predication been developed to open a Predicated Investigation on 
specific individuals idenlified during the Assessment; and 
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E) (U'V'FOUO) should die Assessment he terminated, 

(U//FQUO) The ARS must be documented in an EC and uploaded to the Assessment file. 

(U//FOU0) The EC utilized to document the review of Type 3, 4 and, 6 Assessments must be 
made part of the Assessment file. Therefore, the EC must not be used to memorialize other 
information, such as performance measures. Investigative steps, possible outcomes, or 
compliance matters that are historical 3 v documented on the File Review Sheet, 

3 .4.4.9 (U) TYPE S ASSESSMENTS - ASSESSMENT REVIEW StANDAHUS (ARS) 

(LE/FQUO) In addition to the applicable file review procedures discussed above* supervisors 
are required to evaluate Type 5 Assessments using the below -listed ARS during the file 
review,'- every 90 calendar days {60 days for probationary employees): 

A) (U//KQUO) whether authorized investigative methods have been used properly in all phases of 
ihc Assessment; 

D) (LV/FQUO) whether, in the identification phase, the Assessment has successfully narrowed 
the field to a group of individuals who are likely to have appropriate placement and access: 

C) (U/'TOUO) whether reimbursable expenses incurred by an SA, if any, were reasonable, 
properly aulhorized, and properly documented; 

P) (U'VFOUO) whether the Potential CHS was 'Tasked" to provide information or paid for his/her 
services or expenses (activities which arc not permitted prior to opening the person as a CHS); 

Fv) (U//FOUO) whether there is. a reasonable likelihood that the E’otential CHS can and should be 
recruited or, iT the Assessment is in the Identification Phase, the plan has a reasonable 
hkdlhoodof generating a group of Potential Cl IS*: and 

F) (LV/FQUQ) whether the Type 5 Assessment should continue for an additional 90 days (60 
days for probationary employees), If continuation is justified, tbe SiA/SSA must document the 
rationale for keeping the Type 5 Assessment open. 

(U//FOUO) The review must be documented in an EC or successor form in DELTA and 
uploaded [o the Assessment 311c. Because Type 5 Assessments are confidential, a Case 
Review Sheet is not avai3ab!e in ACS. 

(U//FOUO) The PC (or successor form in DELTA) utilized to document the evaluation of the 
ARSs For Type 5 Assessments must be made part of the Assessment file. Therefore, the EC 
(or successor form in DELTA) must not be used to memorialize other information, such as 
performance measures, investigative steps* possible outcomes, or compliance matters. 

3 .4.4. 1 0 (U) Docijmen t ati on of Ft le Re vi ews 

(U/'FQUO) Investigative Case Management ([CM I Case Review Sheets (also known as File 
Review' Sheets) are currently generated by ACS. These must be completed by the supervisor 
as part of the file review process and maintained as a part of the employee’s performance 
folder to be used as a tool in determining an employee's performance rating. Documents 
maintained for evaluations, including copies of File Review Sheets, must be destroyed within 
30 calendar days after tbe expiration of (he previous PAR year. The original File Review 
Sheets are to be maintained for inspection and other purposes not related to the performance 
appraisal process {FBI Corporate Policy Notice 0043N). 
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(L..FOUO) Performance Summary Assessments (PSA)- are required to be completed by ihe 
supervisor as part of the file review process [see FBI Corporate Policy Notice OWN). The 
FD-865 must be used to memorialise Ihe PSA, The form must he signed and dated by the 
supervisor. The original FD-&63 must be submitted to the Held office’s executive 
management, which is responsible tor ensuring that PSAs arc conducted, OnC Completed copy 
of the FD-X65 must be placed in the employee's performance folder maintained by the rating 
official for inspection, mid-year progress reviews, development worksheets* and annual 
performance appraisal purposes (this provision does not apply to TFOs), A second completed 
copy must be given to the employee. FD-865s maintained for performance evaluation must be 
destroyed within 30 calendar days after the expiration of the previous Performance Annual 
Review (PAR) year. 

3.4,4.11 (U) Records R fiction 

j U//FOUO) Supervisors must conduct, document and retain file reviews as specified above. 
Supervisors must maintain appropriate due u mentation and review it periodically with 
particular attention to documenting an employee’s ability to successfully complete his or Iter 
investigative assignments and to documenting a probationary employee's success or failure 
during the probationary period. 

3.5 fU) Chief Division Counsel (CDC) Roles and Responsibilities 

(U//FOUO) The CDC must review ail Assessments and Predicated Investigations involving 
sensitive investigative matters as discussed in DiOG Section 10 as well as review the use of 
eeriam investigative methods as discussed in Section 18. The primary purpose of the CDC's 
review is to ensure the legality of the actions proposed. Review, in this context, includes a 
determination that the investigative activity is: (i) not legally objectionable (e,g., that it is not 
based solely on the exercise of First Amendment rights (i.e,, the free exercise of speech, religion, 
assembly, press or petition) or on the race, ethnicity, national origin or religion of the subject); 
and (ii ) founded upon an authorized purpose and, 'or adequate factual predication and meets the 
standard specified in the DIOG, The CDC" should also include in his or her review and 
recommendation, if appropriate, a determination of the wisdom of the proposed action (e.g., the 
(’DC may have no legal objection but may recommend denial because the value of the proposal 
ls outweighed by the intrusion into legitimate privacy interests). The CDC' £ determination that 
an investigative activity is; (i) not legally objectionable; and (it) warranted from a mission 
standpoint is based on facts known at the time of the review and recommendation. Often, these 
facts are not verified or otherw ise corroborated until the investigative activity commences, As a 
result, the CDC may require additional CDC reviews or provide guidance to supervisory 
personnel with regard to monitoring the results of the investigative activity to ensure that the 
authorized purpose and/or factual predication remains intact after the facts are developed. The 
regularity of such review is within the CDC's discretion, Activities found to he legally 
objectionable by the CDC may not he approved unless and until the CDC’s determination is 
countermanded by the FBI General Counsel ora delegated designee. 

(U//FOUO) For investigative activities involving a sensitive investigative matter, the CDC must 
also independently consider ihe factors articulated in Section 10 and provide the approving 
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authority with a recommendation as to whether, in the CDCs judgment, the investigative 
activity should be approved. 

(U//FOUO) Throughout the DIOG, any requirement imposed on the (’DC may be performed by 
an Associate Division Counsel (ADC) or a designated Acting CDC. 

3.6 (II) Office of the General Counsel (OGC) Roles and Responsibilities 

(U//FOUO) The mission of the FBI’s Office of the General Counsel (OGC) is to provide 
comprehensive legal advice to the Director, other FBI officials and divisions, and field offices on 
a wide array of national security, investigative, and administrative operations. In addition to 
providing legal advice as requested, OGC reviews the legal sufficiency of sensitive Title III 
affidavits and a wide variety of operational documents relating to foreign counterintelligence/ 
international terrorism investigations, including requests for surveillance and physical searches 
pursuant to the Foreign intelligence Surveillance Act (FISA I and undercover proposals, and 
manages the physical How of FISA requests, applications, orders, and returns. OGC maintains 
liaison with the intelligence community on legal issues and review's for legal sufficiency 
proposals to share information or form partnerships with other federal, slate, local, and 
international agencies. OGC also supports federal cri minal prosecutions by assisting in criminal 
discovery and by conducting reviews of personnel fifes, coordinates the defense of the FBI and 
its employees in civil actions which arise out of the FBI's investigative mission and personnel 
matters, and responds to Congressional requests for FBI documents. OGC addresses legal issues 
associated with the impact of communication and information technology on the ability of the 
FBI and other law-enforcement and intelligence agencies to execute their public safety and 
national security missions, including their ability to conduct authorized electronic surveillance. 

(U//FOUQ) In coordination w ith the DOJ NSD, the tXJC is responsible for conducting regular 
reviews of all aspects of FBI national security and foreign intelligence activities. The primary 
purpose of the OGC's review is to ensure the legality of the actions proposed. These reviews, 
conducted at FBI field offices and FBIHQ* units, broadly examine such activities for compliance 
with the AGG-Dom and other applicable requirements. Review, in this context, includes a 
determination that the investigative activity is: (i) not legally objectionable (e.g.. that it is not 
based solely on the exercise of First Amendment rights or on the race, ethnicity, national origin 
or religion of the subject); and (ii) founded upon an authorized purpose and/or adequate factual 
predication and meets the siandard specified in the DIOG. The OGC should also include in its 
review and recommendation , if appropriate, a determination of the wisdom of the proposed 
action (e.g., the OGC may have no legal objection hut may recommend denial because the value 
of the proposal is outweighed by the intrusion into legitimate privacy interests). The OGC*s 
determination that an investigative activity is; (i) not legally objectionable; and (ii) warranted 
from a mission standpoint is based on facts known at the time of the review and 
recommendation. Oiler these facts are nut verified or otherwise corroborated until the 
investigative activity commences. As a result, the OGC may require additional OGC reviews or 
provide guidance to supervisory personnel with regard to monitoring the results of the 
investigative activity to ensure that the authorized purpose and/or factual predication remains 
intact after the facts are developed. The regularity of such review is within the discretion of 
OGC. 
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(U//FOUO) For those investigative activities involving a sensitive investigative matter requiring 
GGC review, the OGC must independently consider the factors articulated in Section 10 and 
provide Lhc approving authority with a recommendation as to whether, in the GGC 1 s judgment, 
the investigative activity should be approved, 

(U//FOUO) Throughout the DIGG, any requirement imposed on the General Counsel may be 
delegated and performed by a designated OGC attorney. All delegations must be made as set 
forth in Section 3.4.3 above, 

3.7 (U) Corporate Policy Office (CPO) Roles and Responsibilities 

(U//FOUO) Subject to the guidance of the Deputy Director, the CPO has oversight of the 
implementation of the DIOG, Working with the Deputy Director's office, the CPO may make 
revisions to the DIOG as necessary, following appropriate coordination with the QIC, OGC and 
other FRJHQ or field office entities. In the process of implementing and analyzing the DIOG, the 
CPO should report any apparent compliance risk areas directly to the OIC, Additionally, the 
CPO will work directly with the OIC to ensure that the policies, training and monitoring are 
adequate to meet compliance monitoring proeedures. 

(U//FOUG) The CPO is responsible for ensuring the following; 

A | (U, ’/FOLIO) The DIOG is updated as necessary to comply with changes in the law, rules, or 
regulations; 

B) (DZ/FOLIO) The DIOG is reviewed every three years from the effective date of the 201 1 
revision, and revised as appropriate, This mandatory review schedule, however. does not 
restrict the CPO. which is responsible tor all corporate policy matters, from working with 
FBI HQ divisions and field offices to make policy revisions to the DIOG and the PGs 
whenever necessary and appropriate during the three year period. The CPO may also make 
technical or nan -substantive language or formatti mg changes lo the DIOG, as necessary, 
provided (hose changes clarify (he meaning without altering the substance; 

C) (U//FOUO) Existing and proposed investigative and administrative policies and PGs comply 
with the standards established in the AGG'Dom and DIOG. On behalf of the Deputy Director, 
the CPO has the authority, following coordination with the OIC and OGC, to modify or 
remove any provision of existing or proposed investigative or administrative policies or PCs 
determined to violate, contradict, or otherwise modify the intent or purpose of any provision 
or standard established in the AGG-Dom or the DIOG: and 

D) (U//FOUO) If the CPO makes any changes [o the DIOG or other policy pursuant (o 3,7. B 
and/or C above, the CPO will immediately advise by e-mail all FBI HQ and field office 
Division Policy Officers (DPO] of such changes and all DPOmust further advise their 
respective FBI employees of such changes, The electronic version of the DIOG maintained in 
the CPO's Policy and Guidance Library is the official current policy of the Fbl. 

3.8 (U) Office of Integrity and Compliance [QIC) Roles and 
Responsibilities 

(U//FOUO) QIC is responsible for reviewing the DIOG and working with each FB1HQ division 
and the CPO to identify' compliance risk areas and. to ensure the adequacy of policy statements, 
training and monitoring, When compliance risk areas are identified, OIC must work with the 
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divisions, field offices, and/or programs affected by the risk and develop programs to review the 
adequacy of policy statements, training, and monitoring in order to mitigate those concerns 
appropriately. 

3.9 (U) Operational Program Manager Boles and Responsibilities 

(U//FOUO) In addition to managing national level programs, coordinating investigations, 
training, and providing guidance and oversight to the field, the FBIHQ Operational Program 
Managers are responsible for identifying, prioritising, and analyzing potential compliance risks 
within their programs regarding implementation of the DIQG and developing mitigation plans 
where warranted, 

(U//FOUQ) Operational Program Matiagers must proactively identify and take appropriate action 
to resolve potential compliance concerns. In identifying possible compliance concerns. Program 
Managers should consider the following indicators of possible compliance issues: 

A) (U//FOUQ) Similar activities being handled differently from squad-to-squad / imit-to-unil ! 
field cflke-to-ficld office; 

B) (U//FOLJQJ Unusually high level of contact with FBI HQ’ division for basic information on 
how to conduct an activity: 

G) (U//FOUO) Apparent confusion over how to conduct a certain activity; 

D) fU/i'FOLiOl Policy conflict: 

E) (U//FOUD) Non-ex istent/inaccuraie/wrongly targeted training; 

F) (U//FQUO) Monitoring metharisms that do not exist or do nut test the right information (e.g. 
file review s/progratn management); and 

G) (U//FOUO) Inadequate processes in place to audit for compliance. 

(U //FQU O) Operational Program Managers may not retaliate or take adverse ac tio n against 
pereems who raise compliance concerns , 

3.10 (U) Division Compliance Officer Roles and Responsibilities 

(U//FOUO) Each FRIHQ division and field office must have a Division Compliance Officer 
(DCO). The DCO will proactively identify potential risk of non-compliance in the 
implementation of the DIOG and report them to the proper authority and the OIC. The DCO 
must always be aware that the focus of a compliance program is the identification and resolution 
of a compliance problem using non-punitivc and non -retaliatory means. 

3.11 (U) Position Equivalents - FBI Headquarters [FBIHQ) Approval 
Levels 

IU//FOUO) The official position equivalents between the field offices and FBIHQ are outlined 
below . In general, an equivalent position at either the field or FBIHQ may exercise DIOG 
authority, unless the DIOG specifically limits a given authority. The equivalent positions are: 

AHU./FOUO) Field Office Analyst or Special Agent = FBIHQ Analyst or Special Agent: 
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B) (U//FOUO) Field Office SI A = FBI HQ SIA; 

C) (U FOUO)CDC = FBIHQ OGC General Attorney; 

D) (U/YOUO) Field Office SSA = FBIHQ SSA; 

E) (U//FOUO) Field Office AS AC = FBIHQ UC; 

R (U//FOUO) SAC = FBIHQ SC; am! 

G) (U//FOUO) AD1C = FBIHQ AD. 
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4 (U) PRIVACY AND CIVIL LIBERTIES, AND LEAST INTRUSIVE 

METHODS 


4.1 (U) Civil. Liberties and Privacy 

4.1.1 ( U} Overview 

(U) The FBI is responsible for protecting the security of our nation and its people from crime and 
terrorism while maintaining rigorous obedience to the Constitution. The Attorney General $ 
Guidelines for Domestic FBI Activities (AGO- Dam) establish a set of basic principles that sene 
as the foundation for all FBI mission-related activities. When these principles are applied, they 
demonstrate respect for civil liberties and privacy as well as adherence to the Constitution and 
laws of the United States. These principles arc as follows: 

A) {U) Protecting the public includes protecting tlieir rights and liberties* THE investigative 
activity is premised, upon the fundamental duty of government to protect the public, which 
must be performed with earn to proiect individual rights and to ensure that investigations an; 
confined to matters of legitimate government interest. 

B) (U) Only investigate for a proper purpose. All FBI investigative activity must have an 
authorized law enforcement, national security, or foreign intelligence purpose, 

C) (U) Rare, ethnicity, religion, or national origin alone can never constitute the sole basis 
for initiating investigative activity. Although these characteristics may be taken into account 
under certain circumstances, there must be an independent authorized taw enforcement or 
national security purpose for initiating investigative activity, 

D) (L) Only perform authorized activities in pursuit of investigative objectives. Authorized 
activities conducted as pari of a lawful assessment or investigation include the ability to: 
collect criminal and national security information, as well as foreign intelligence; provide 
investigative assistance to federal, state, local, tribal, and foreign agencies; conduct 
intelligence analysis and planning; and retain and share information, 

E) {U) Employ the least intrusive means that do not otherwise com promise FIJI operations. 

Assuming a lawful intelligence or evidence collection objective, i.e„ an authorized purpose, 
strongly consider the method (technique) employed to achieve that objective that is the least 
intrusive available (particularly it there is the potential to interfere with protected speech and 
association, damage someone’s reputation, intrude on privacy, or interfere with the 
sovereignty of foreign governments) while still being operationally sound and effective. 

F) (If) Apply best judgment to the circumstances at hand to select the most appropriate 
investigative means tn achieve the investigative goaL The choice of which investigative 
melhod to employ is a mailer of judgment, bui the FBI must not hesitate to use any lawful 
method consistent with the AGG-Dom when the degree of intrusiveness is warranted in light 
Of the seriousness of the matter concerned. 

4 > 1 2 (U) Purpose of Investiga t ive A cti vrn 

(U) One of the roost important safeguards in the AGG-Dom — one that is intended to ensure that 
FBI employees respect the constitutional rights of Americans — is the threshold requirement that 
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all investigative activities be conducted for an authorized purpose, Under the AGG-Dom that 
authorized purpose must be art authorized national security, criminal, or foreign intelligence 
collection purpose. 

(U) Simply staling such a purpose, however, is not sufficient to ensure compliance with this 
requirement. The authorized purpose must be well-founded and well-documented. In addition, 
the information sought and the investigative method used to obtain it must be focused in scope, 
lime, and manner to achieve the underlying purpose. Furthermore, the Constitution sets limits on 
what that purpose may be. Ir may not be solely to monitor the exercise of constitutional rights, 
such as the free exercise of speech, religion, assembly, press and petition, and, equally important, 
the authorized purpose may not be based solely on the race, ethnicity, national origin or religious 
beliefs of an individual, group, or organization or a combination of only those factors, 

(LJ) It is important to understand how the “authorized purpose 5 ’ requirement and these 
constitutional limitations relate to one another, For example, individuals or groups who 
communicate w ith each other or with members of ihe public in any form in pursuit of social or 
political causes — such as opposing war or foreign policy, protesting government actions, or 
promoting certain religious beliefs — have a First Amendment right to do so. No investigative 
activity may be conducted for the sole purpose of monitoring the exercise of these rights If a 
well-founded basis to conduct investigative activity exists, however, and that basis is not solely 
activity that is protected by the First Amendment or on the race, ethnicity, national origin or 
religion of the participants — FBI employees may assess or investigate these activities, subject to 
other limitations in the AGG-Dom and the DIGG, In such a situation, the investigative activity 
would not be based solely on constitutionally-protected conduct or on race, ethnicity, national 
origin or religion, Finally, although investigative activity would be authorized in this situation, it 
is important that it be conducted in a manner that docs not materially interfere with the ability of 
the individuals or groups to engage in the exercise of constitutionally-protected rights. 

4 * 13 [U)0 VERSIGR T AND SELF-REGULA TION 

(U) Every FBI employee has the responsibility to ensure that the activities of the FBI are lawful, 
appropriate and ethical as well as effective in protecting the civil liberties and privacy of 
individuals in the United States. Strong oversight mechanisms are in place to assist the FBI in 
carrying out this responsibility, Department of Justice ( DO J) oversight is provided through 
provisions of the AGG-Dom. other Attorney General Guidelines, and oversight by other DOJ 
components. DOJ and the FBI's Inspection Division, and the FBI’s Office of Integrity and 
Compliance (OIC) and Office of the General Counsel (OGC), also provide substantial 
monitoring and guidance. In the criminal investigation arena, prosecutors and district courts 
exercise oversight of FBI activities. In the national security and foreign intelligence arenas, the 
DOJ National Securi ty Division (NSD) exercises that oversight. The DOJ NSD's Oversight 
Section and the FBI 's OGC are responsible for conducting regular reviews of all aspects of FBI 
national security and foreign intelligence activities. These reviews, conducted at FBI field offices 
and FBI Headquarters (FBI HQ) divisions, broadly examine such activities for compliance with 
the AGG-Dom and other applicable requirements. In addition, the AGG-Dom creates additional 
requirements, including: 

A) fU) Required notification by the FBI to the DOJ NSD concerning a Full Investigation that 
involves foreign intelligence collection* a Full Investigation of a United Stales penson 
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(USPERJ in relation to a ihreal to the national security , or a national security investigation 
involving a "sensitive investigative matter” ( SIM H see DIOG Section 10). 

S) (U) An annual report by die FBI to the DOJ NS D concerning tJic FBI's foreign intelligence 
collection program, including information reflecting the scope and nature of foreign 
intelligence collection activities in each FBI field office 

C) (Lf) Access by the DOJ NSD to information obtained by the FBI through national security or 
foreign intelligence activities. 

OKU) General authority for the Assistant Attorney General for National Security to obtain 
reports from the FBI concerning these activities, fAGG-Dom, Ittira C) 

(U) Further examples of oversight mechanisms include Lhc involvement of both FBI ami 
prosecutorial personnel in the review of undercover operations involving sensitive 
circumstances; notice requirements lor investigations involving sensitive investigative matters; 
ajid notice and oversight provisions for Enterprise Investigations, which involve a broad 
examination of groups implicated in criminal and national security threats. These requirements 
and procedures help to ensure that the rule of law Is respected in the FBI's activities and that 
public confidence is maintained in these activities, ( AGG-Dom, Intro. C) 

(U) in addition to the above-described oversight mechanisms, the FBI is subject to a regime of 
oversight, legal limitations, and self-regulation designed to ensure strict adherence to the 
Constitution. This regime is comprehensive and has many facets* including the following; 

AMU) The foreign Intelligence Surveillance Act of 1978* as amended, and Title 111 of the 
Omnibus Crime Control and Safe Streets Act of 1 96£. These laws establish lhc processes for 
obtaining judicial approval of electronic surveillance and physical searches far the purpose of 
collecting foreign intelligence and electronic surveillance for the purpose of collecting 
evidence of crimes. 

B) (tj)The Whistleblower protection Ads of 19S9 and These laws protect whistleblowers 
from retaliation. 

C) (U) The Freedom of information Act of 1 966. This law provides the public with access to FBI 
documents not covered by a specific statutory exemption, 

D> (U)The Privacy Act of 1974, This taw balances the government's need to maintain 

informal ion about United Stales citizens and legal permanent resident aliens with the rights of 
i hose individuals to be protected against unwarranted invasions of their privacy stemming 
from the government's collection, use, maintenance, and dissemination of that information. 
The Privacy Act forbids the FBI and other federal agencies from collecting information about 
how individuals exercise their First Amendment rights, unless that collection is expressly 
authorized by statute or by (he individual, or is pertinent to and within the scope of an 
authorized taw enforcement activity (5 U.S.C. § 552a[e]{7|). Activities authorized by the 
AGG-Dom - with the exception of Positive Foreign Intelligence collection (see DIOG Section 
9.1) - are authorized law enforcement activities or activities for which there h otherwise 
statutory authority for purposes of lhc Privacy Act. 

E) (U l Documents describing First Amendment activity that are subsequently determined 10 have 
been collected or retained in violation of the Privacy Act must be destroyed as set forth in 
Records Management Division (FUMDI Policy Notice 0IQ8N . 

(U) Congress, acting primarily through the Judiciary and Intelligence Committees, exercises 
regular, vigorous oversight into all aspects of the FBI’s operations. To this end, the National 
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Security Act of \ 947 requires the FBI la keep the intelligence committees (for the Senate and 
House of Representatives) fully and currently informed of substantial intelligence activities. This 
oversight has significantly increased in breadth and intensity since the 1970*$., and it provides 
important additional assurance that the FBI conducts its investigations according to the taw and 
the Constitution. Advice on what activities fall within the supra of required congress Iona] 
notification can be obtained from OCA (A Corporate Policy Directive is forthcoming] . 

(U) "The FBI's intelligence activities {as defined in Section 3.4(e) of Executive Order (LO) 12333 
[see DIOG Appendix B]) are subject to significant self- regulation and oversight beyond that 
conducted by Congress. The Intelligence Oversight Board (JOB), comprised of members from 
the President s Intelligence Advisory Board ;PIAB). also conducts oversight of the FBI's 
intelligence activities. Among its responsibilities, the !GB must inform the President of 
intelligence activities the IOB believes; (!)(□} may be unlawful or contrary to EQ or Presidential 
Decision Directive {FDD), and (b) are not being adequately addressed by the Attorney General, 
the Director of National Intelligence (DN1), or the head of the department concerned; or(ii) 
should be immediately reported to the President. The requirements and procedures for reporting 
potential IOB matters to OGC/NS.LB can be found in Corporate Policy Directive Dl SUP 
(Guidance on IOB Matters), and the Policy Implementation Guide (PG) LUfriiHFG , 

(U) Internal FBI safeguards include: 

A) (U) the QGC's Privacy and Civil Liberties UniM PCLUh which reviews plans For any 
proposed FBI record system for compliance with the Pri vacy Act and related privacy 
protection requirements and policies and which provides legal advice on civil Liberties 
questions; 

B) (U) the criminal and national security undercover operations review committees, comprised of 
senior DOJ and FBJ officials, which review ah proposed undercover operations that involve 
sensitive circumstances; 

C) (U) the Sensitive Operations Review Committee (SORC), comprised of senior DOJ and 
FBI officials, which provides oversight or those investigative activities that may impact civil 
liberties and privacy and that are not otherwise subject to high level FBI and DOJ review; 

D) (U) the FBI requirement that all FBI employees report departures from and non-compliance 

with the DIOG to their supervisor, other management officials, or appropriate authorities as 
set forth in DIOG Sections. 2.6 2.8 and 3.1.1; and 

EE) (U) training new FBI employees on privacy and periodic training for all FBI employees to 
maintain currency on the latest guidelines, changes to laws and regulations, and judicial 
decisions related to constitutional rights and liberties. 

4.2 (U) Protection of First Amendment Rights 

(U) A fundamental principle of the Attorney General's Guidelines for FBI investigations and 
operations since the first guidelines were issued in 1976 has been that investigative activity may 
not be based solely on the exercise of rights guaranteed by the First Amendment to the United 
States Constitution, This principle carries through to the present day in the AGG-Dorn. The 
Privacy Act contains a corollary' principle the government is prohibited from retaining 
information describing how a person exercises rights under the First Amendment, unless that 
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information is pertinent to or within the scope of an authorized law enforcement activity. 5 
U.S.C. $ 552a(e)(?>. 

{U) The First Amendment states; 

(U) Congress s half make no k w respecting an establishment of religion, or prohibiting 
the free exercise thereof ; or abridging the freedom of speech, or of the press; or of the 
tight of file people peaceably to assemble, and to petition the Government for a redress of 
grievances. 

(U) Although the amendment appears literally to apply only to Congress, the Supreme Court 
made clear long ago that it also applies lo activities of the Executive Branch, including law 
enforcement agencies. Therefore, for FBI purposes, it would be helpful to read the introduction 
to (he first sentence as; 'The FBI shall take no action respecting,.." In addition, the word 
“abridging" must be understood. "Abridging," as used here, means “diminishing." Thus, it is not 
necessary for a law enforcement action to destroy or totally undermine the exercise of First 
Amendment rights for it to be unconstitutional; significantly diminishing or lessening the ability 
of individuals to exercise these rights w ithout an authorized investigative purpose is sufficient 

(U) This is not to say that any diminution of First Amendment rights is unconstitutional. The 
Supreme Court has never held that the exercise of these rights is absolute. In fact, the Court has 
realistically interpreted the level and kind of government activity that violates a First 
Amendment right. For example, taken to an extreme, one coyld argue that the mere possibility of 
an FBI agent being present at an open forum {or as an on-line presence) would diminish the right 
of free speech by a participant in the fomm because he/ she would be afraid to speak freely. The 
Supreme Court, however* has never found an “abridgement" of First Amendment rights based oti 
such a subjective fear. Rather, the Court requires an action that, from an objective perspective, 
truly diminishes the speaker's message or his/her ability to deliver it (e.g., pulling the plug on the 
sound system!. For another example, requiring protestors to use a certain parade route may 
diminish their ability to deliver their message in a practical sense, but the Court has made it 
clear, that for legitimate reasons (e.g., public safety), the government may impose reasonable 
limitations in terms of time, place and manner on the exercise of such rights, as long as the 
ability to deliver the message remains, 

|U) While the language of the First Amendment prohibits action that would abridge the 
enumerated rights, the implementation of that prohibition in the AGG-Dom reflects the Supreme 
Court's opinions on the constitutionality of law enforcement action that may impact the exercise 
of First Amendment rights.. As stated above, the AGG-Dom prohibits investigative activity for 
the sofc purpose of monitoring the exercise of First Amendment rights. The importance of the 
distinction between this language and the actual text of the First Amendment is two-fold; ti5 the 
line drawn by the AGG-Dom prohibits even “monitoring" the exercise oT First Amendment 
rights {far short of abridging those rights} as the sole purpose of FBI activity; and tii) the 
requirement of an authorized purpose for all investigative activity provides additional protection 
for the exercise of constitutionally protected rights, 

(U) The AGG-Dom classifies investigative activity that involves a religious or political 
organization (or an individual prominent in such an organization) ora member of the news 
media as a “sensitive investigative matter," That designation recognizes the sensitivity of 
conduct that traditionally involves the exercise of First Amendment rights by groups* e.g., who 
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associate for political or religious purposes or by die press. The requirements for opening, and 
pursuing a '‘sensitive investigative matter” are set forth in DIOG Section 10, It should be clear, 
however, from the discussion below just how pervasive the exercise nfFirst Amendment rights 
is in American life and that not all protected First Amendment activity will fall within the 
definition of a “sensitive investigative matter. 1 ' Therefore, it is essential that FBI employees 
recognize when investigative activity may have an impact on the exercise of these fundamental 
rights and be especially sure that any such investigative activity has a valid law enforcement or 
national security purpose, even if it is not a "sensitive investigative mailer" as defined in the 
AGG-Dom and the DIOG. 

(U) Finally, it is important to note that individuals in the United States (and organizations 
comprised of such individuals) do riot forfeit (heir First Amendment rights simply because they 
also engage in criminal activity or in conduct that threatens national security. For example, an 
organization suspected of engaging in acts of domestic terrorism may also pursue legitimate 
political goals and may also engage in lawful means to achieve those goals. The pursuit of these 
goals through constitutionally protected conduct does not insulate them from legitimate 
investigative focus for unlawful activities — bul die goals and the pursuit of their goals through 
lawful means remain protected from unconstitutional infringement, 

(U) When allegations of First Amendment violations are brought to a court of law, it is usually in 
the form of a civil suit in which a plaintiff has to prove some actual or potential harm. See. eg. r 
Presbyterian Church w United States, 870 F.2d 518 (9th Cir. 1989) (challenging INS 
surveillance of churches). In a criminal trial, a defendant may seek either or both of two remedies 
as part of a claim that his or her First Amendment rights were violated: suppression of evidence 
gathered in the alleged First Amendment violation, a claim typically analyzed under the 
“reasonableness" clause of the Fourth Amendment, and dismissal of the indictment on the basis 
of "outrageous government conduct" in violation of the Due Process Clause of the Fifth 
Amendment. 

(U) The scope of First Amendment rights and their impact on FBI investigative activity are 
discussed below. The First Amendments "establishment clause" — the prohibition against the 
government establishing or sponsoring a specific religion — has little application to the FBI and. 
therefore, is not discussed here. 

4 . 2. 1 (U) Free Speech 

(U) The exercise of free speech includes far more than simply speaking on a controversial topic 
in the town square. It includes such activities as carrying placards in a parade, sending idlers to a 
newspaper editor, posting information on the Internet, wearing a tee shin with a political 
message, placing a bumper sticker critical of the President on one's car, and publishing books or 
articles. The common thread in these examples is conveying a public message or an idea through 
words or deeds. Law enforcement activity that diminishes a person's ability to communicate in 
any of these ways may interfere with his or her freedom of speech and thus may not be 
undertaken by the FBI solely for that purpose. 

(U) It is important to understand the line between constitutionally protected speech and advocacy 
of violence or of conduct that may lead to violence or other unlawful activity, in Brandenhurgy, 
Ohio, 395 U,S. 444 (l 969}, the Supreme Court established a two-part test to determine whether 
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such speech, is const inn io dally protected: the government may not prohibit advocacy offeree or 
violence except when such advocacy (i) is intended Lu indie imminent lawless action, and (if) is 
likely to do so, Therefore, even heated rhetoric or offensive provocation that could conceivably 
Jead to a violent response in the future is usually protected, Suppose, for example, a politically 
active group advocates on its web site taking unspecified "action" against persons or entities it 
v lews as the enemy, who thereafter suffer properly damage and/or personal injury. Under the 
Brandenburg two-part test, the missing specificity and imminence in the message may provide it 
constitutional protection. For that reason, law enforcement may take no action that, in effect, 
blocks the message or punishes its sponsors. 

i U) Despite the high standard for interfering with free speech or punishing those engaged in it. 
the law does not preclude FBI employees from observing and collecting any of the forms of 
protected speech and considering its content — as long as those activities are done for a valid law 
enforcement or national security purpose and are conducted in a manner that does not unduly 
infringe upon the ability of the speaker to deliver his or her message. To be an authorized 
purpose it must be one that is authorized by the AGG-Dom— i.e.. to further an FBI Assessment, 
Predicated Investigation, or other authorized function such as providing assistance to other 
agencies. Furthermore, by following the standards for opening or approving an Assessment or 
Predicated Investigation as contained in the DIQG. the FBI will ensure that there is a rational 
relationship between the authorized purpose and the protected speech to be collected such that a 
reasonable person with knowledge of the circumstances could understand why the information is 
being collected, 

( U) Returning to the example posed above, because the group’s advocacy of action could be 
directly related by circumstance to property damage suffered by one of the group T s known 
targets, collecting the speech — although constitutionally protected can I aw hilly occur. 

Similarly, listening to and documenting the public talks by a religious leader, who is suspected of 
raising funds for a terrorist organization, may yield clues as to his motivation, plan of action, 
and/or hidden messages to his followers, FBI employees should not, therefore, avoid collecting 
First Amendment protected speech if it is relevant to an authorized AGG-Dom purpose — as long 
as FBI employees do so in a manner that does not inhibit the delivery of the message or the 
ability of the audience to hear it, and so long as the collection is done in accordance with the 
discussion of least intrusive means or method in Section 4,4. 

i U) In summary, during the course of lawful investigative activities, the FBI may lawfully 
collect, retain, and consider the content of constitutionally protected speech, so long as: (i) the 
collect ion is logically related to an authorized investigative purpose; (it) the collection does not 
actually infringe on the ability of the speaker to deliver his or her message: and ( iii ) the method 
of collection complies with the least intrusive method policy, 

4,2, 2 (U) Exercise of Religion 

(U) Like the other First Amendment freedoms, the "free exercise of religion" clause is broader 
than commonly believed. First, it covers any form of worship of a deity — even forms that are 
commonly understood to be cults or fringe sects, as well as the right not Lo worship any deity. 
Second, protected religious exercise also extends to dress or food that is required by religious 
edict, attendance at a facility used for religious practice (no matter how unlikely it appears to be 
intended for that purpose), observance of the Sabbath, raising money for evangelical or 
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t - nar. purposes, and proselytizing. Even in controlled environments like prisons, religious 
exercise must be permitted — subject lo reasonable restrictions as to time, place, and manner, 
Another feature of this First Amendment right is that religion is a matter of heightened 
sensitivity to some Americans- especially to devout followers. For this reason, religion is a 
matter that is likely to provoke an adverse reaction if the right is violated regardless of which 
religion is involved. Therefore, when essential investigative activity may impacL this right, the 
investigative activity must be conducted in a manner that avoids the actual — and the appearance 
of — interference with religious practice lo ihc maximum extent possible. 

{U) While there must be an authorized purpose for any investigative activity that could have an 
impact on religious practice, this docs not mean religious practitioners or religious facilities arc 
completely free from being examined as part of an Assessment or Predicated investigation. If 
such practitioners are involved in — or such facilities arc used for — activities that are the proper 
subject of FBI-authorized investigative or intelligence eol lection activities, their religious 
affiliation does not lt immtmize + ‘ them to any degree from these efforts. It is paramount, however, 
that the authorized purpose of such efforts be properly documented, It is also important tliat 
investigative activity directed at religious leaders or at conduct occurring within religious 
facilities be focused in time and manner so as not to infringe on legitimate religious practice by 
any individual but especially by those who appear unconnected to the activities under 
investigation. 

(U) Furthermore, l-BI employees may take appropriate cognizance of (he role religion may play 
in the membership or motivation of a criminal or terrorism enterprise. If, for example., affiliation 
with a certain religious institution or a specific religious sect is a known requirement for 
inclusion in a violent organization that is the subject of an investigation, then whether a person of 
interest is a member of that institution or sect is a rational and permissible consideration, 
Similarly, if investigative experience and reliable intelligence reveal that members of a terrorist 
or criminal organization are known to commonly possess or exhibit a combination of religion- 
based characteristics or practices (e-g-, group Leaders State that acts of ten-orism are based in 
religious doctrine),. it is rational and lawful to consider such a combination in gathering 
intelligence about the group — even if any one of these, by itself, would constitute an 
impermissible consideration. By contrast, solely because prior subjects of an investigation of a 
particular group were members of a certain religion and they claimed a religious motivation for 
their acts of crime or terrorism, other members' mere affiliation with that religion, by itself, is 
not a basis to assess or investigate— absent a known and direct connection to the threat under 
Assessment or investigation. Finally, the absence of a particular religious affiliation can be used 
lo eliminate certain individuals from further investigative consideration in those scenarios where 
religious affiliation is relevant. 

42. 3 (U) Freedom of the Press 

(U) Contrary to what many believe, this well-known First Amendment right is not owned by the 
news media; it is a right of the American people. Therefore, this right covers such matters as 
reasonable access to news-making events, the making of documentaries, and various other forms 
of publishing the news. Although the news media typically seek to enforce this right, freedom of 
the press should not be viewed as a contest between law enforcement or national security, on the 
one hand, and the interests of news media, on the other. That said, the news gathering function is 
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the aspect of freedom of the press most likely to intersect with law enforcement and national 
security investigative activities. 

(U) The interest of the news media in protecting confidential sources and the interest of agencies 
like the FBI in gaining access to those sources who may have evidence of a crime or national 
security intelligence often clash. The seminal case in this area is Braruburg v, Hayes. 408 U.S. 
665 f ] 972>, in which the Supreme Court held that freedom of the press does not entitle a news 
reporter to reftise to divulge the identity of his source to a federal grand jury. The Court reasoned 
that, as long as the purpose of law enforcement is not harassment or vindictiveness against the 
press, any harm to the news gathering function of the press (by revealing source identity) is 
outweighed by the need of the grand jury to gather evidence of crime, 

(L 1 ) Partially in response to Branzburg, the Attorney General promulgated regulations that 
govern the issuance of subpoenas for reporter's testimony and telephone toll records, the arrest 
of a reporter for a crime related to news gathering, and the interview of a reporter as a suspect in 
a crime arising from the news gathering process. In addition, an investigation of a member of the 
news media in his official capacity, the use of a reporter as a source, and posing as a member of 
the news media are all sensitive circumstances in the AGG-Doun, DIOG and other applicable 
AGGs, 

(Ul These regulations are not intended to insulate reporters and other news media from FBI 
Assessments or Predicated Investigations. They arc intended to ensure that investigative activity 
that seeks information from or otherwise involves members of the news media: 

A) (U) Ib appropriately authorised; 

B) (U) Is necessary for an important law enforcement or national security objective: 

C) (U) Is the least intrusive means lo obtain the information or achieve the goals; ami 

D) (U) Does not unduly infringe upon the news gathering aspect of the constitutional right to 
freedom of (he press. 

4. 2. 4 (U) Freedom of Peaceful Assembl y and to Petition the Go vernment 

for Repress of Grievances 

(U) Freedom of peaceful assembly, often called the right to freedom of association, presents 
unique issues for law enforcement agencies, including the FBI. Individuals who gather with 
others to protest government action, or to rally or demonstrate in favor of, or in opposition to. a 
social cause sometimes present a threat to public safety by their numbers, by their actions, by the 
anticipated response to their message, or by creating an opportunity for individuals or other 
groups with an unlawful purpose to infiltrate and compromise the legitimacy of the group for 
their own ends. The right to peaceful assembly includes more than just public demonstrations— it 
includes, as well, the posting of group web sites on the Internet, recruiting others to a cause, 
marketing a message, and fund raising. All are protected First Amendment activities if they are 
conducted in support of the organization or political, religious or social cause, 

(U) The right to petition (he government for redress of grievances is so linked lo peaceful 
assembly and association that it is included in this discussion. A distinction between the two is 
that an individual may exercise the right to petition the government by himself whereas assembly 
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necessarily involves others. The right lo petition the government includes writing letters to 
Congress* carrying a placard outside city hall that delivers a political message, recruiting others 
to one's cause, and lobbying Congress or an executive agency for a particular result, 

(U) For the FBI, covert presence or action w ithin associations or organizations, also called 
"undisclosed participation,” has the greatest potential to impact this constitutional right, The 
Supreme Court addressed this issue as a result of civil litigation arising from one of the many 
protests against the Vietnam War. In Laird v, Tatum, 408 U.S, I (1972), the Court found that the 
mere existence of an investigative program — consisting of covert physical surveillance in public 
areas, infiltration of public assemblies by government operatives or sources, and the collection of 
news articles and other publicly available information for the purpose of determining the 
existence and scope of a domestic threat to national security does not, by itself, violate the First 
Amendment rights of the member* of the assemblies. The subjective “chilP to the right to 
assembly, based on the suspected presence of government operatives, did not by itself give rise 
to legal "standing' tor plaintiffs to argue that their eon sli tut tonal rights had been abridged. 
Instead, the Court required a showing that the complained-of government action would 
reasonably deter the exercise of that right. 

(U) Since Laird r, Tatum w as decided, the lower courts have examined government activity on 
many occasions to determine whether it gave rise lo a "subjective chill" or an “objective 
deterrent." The basic standing requirement establish by Laird remains unchanged today. The 
lower courts, however, have often imposed a very low threshold of objective harm to survive a 
motion to dismiss the case. For example, plain tilts who have shown a loss of membership in an 
organization, loss of financial support, loss lo reputation and status in the community, and loss of 
employment by members have been granted standing to sue. 

(U) More significant for the FBI than the standing issue has been the lower courts 1 evaluation of 
investigative activity into First Amendment protected associations since Laird. The courts have 
held the following investigative activities to be constitutionally permissible under First 
Amendment analysis: 

A) (U) Undercover participation in group activities: 

B) (U) Physical and video surveillance in public areas; 

C) <U) Properly authorized electronic surveillance; 

D) (U} Recruitment and operation of sources; 

E) (U) Collection of information from government, public, and private sources (with consent); 
and 

F) (L 1 } The dissemination of information for a valid law enforcement purpose. 

( U | However, these decisions were not reached in the abstract. In every ease in which the courts 
have found government action to be proper, the government proved that the action was 
conducted for an authorized law enforcement or national security purpose and that the aclion w r as 
conducted in substantial compliance with controlling regulations. In addition, in approving these 
techniques, the courts have often considered whether a less intrusive technique was available to 
the agency, and the courts have balanced the degree of intrusion or impact against the importance 
of the taw enforcement or national security objective, 
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|U) By contrast, since Laird, the courts have found these techniques to be legally objectionable: 

A) <U| Opening an investigation solely because of the group's soclsii or political agenda (even if 
(lie agenda made the group susceptible to subversive infiltration]; 

B) (U) Sabotaging or neutralizing the group's legitimate social or political agenda: 

C) (U) Disparaging the group’s reputation or standing; 

l» (SJ) Leading the group into criminal activity that otherwise probably would not have 
occurred; and 

E) (U) Undermining legitimate recruiting or Funding efforts, 

(U) In every such case, the court found the government's purpose was not persuasive, w r as loo 
remote, or was loo speculative to justify the intrusion and the potential harm to the exercise of 
First Amendment rights. 

(U) Once again, the message is clear that investigative activity that involves assemblies or 
associations of individuals in the United States exercising their First Amendment rights must 
have an authorized purpose under the AGG-Dom and one to which the information sought and 
the technique to be employed arc rationally related. Less intrusive techniques should always be 
explored first and those authorizing such activity (which, as discussed above, will almost always 
constitute a sensitive investigative matter} should ensure that the investigative activity is focused 
as narrowly as feasible and that the purpose is thoroughly documented. 

4,3 (U) Equal Protection under the Law 

43 J (V) Introduction 

(U) The Equal Protection Clause of the United Slates Constitution provides in pan that: “No 
State shall make or enforce any law which shall deny Eo any person within its jurisdiction the 
equal protection of the laws." The Supreme Court and the lower courts have made it dear that 
the Equal Protection Clause applies to the official acts of United States government law 
enforcement agents. See, e.g.. IVhren v. United Slates. 517 U.S. 806 (1996); see also Ch<nv" v. 
Illinois Slat e Police. 251 F 3d 612 (7th Cir, 2001), 

Specifically, government employees are prohibited from engaging in invidious discrimination 
against individuals on the basis of race, ethnicity, national origin, or religious affiliation. This 
principle is Further re Heeled and implemented for federal law enforcement in the United Stales 
Department of Justice’s (inidum- e Regarding the f.'vr afRttce by Federal Lau Fnfinremertf 
Agenci es { hereinafter “DOJ Guidance on the Use of Race"), 

(U) Investigative and intelligence collection activities must not be based solely on race, ethnicity, 
national origin, or religious affiliation, Any such activities that are based solely on such 
considerations arc invidious by definition, and therefore, unconstitutional. This standard applies 
to all investigative and collection activity, including collecting and retaining information, 
opening investigations, disseminating information, and indicting and prosecuting defendants, It 
is particularly applicable to the retention and dissemination of personally identifying information 
about an individual as further illustrated in the examples enumerated below. 
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(U) The constitutional prohibition against invidious discrimination based on race, ethnicity, 
national origin or religion is relevant to both the national security and criminal investigative 
programs of the FBI. National security investigations often have ethnic aspects: members of a 
foreign terrorist organization may be primarily or exclusively from a particular country or area of 
the world Similarly, ethnic heritage is frequently the common thread running through violent 
gangs or other criminal organizations. It should be noted that this is neither a new nor isolated 
phenomenon. Ethnic commonality among criminal and terrorist groups has been relatively 
constant and widespread across many ethnicities throughout the history of the FBI. 

43.2 (V ) Policy Principl es 

(U) To ensure that Assessment and investigative activities and strategies consider racial, ethnic, 
national origin and religious factors properly and effectively and to help assure the American 
public that the FBI does not engage in invidious discrimination, the DIOG establishes the 
following policy principles: 

A) {U) The prohibition on basing investigative activity solely on race or ethnic ity is not avoided 
by considering it in combination with other prohibited factors, For example, a person of a 
certain race engaging in lawful public speech about his religious convictions is not a proper 
subject of investigative activity based solely on any one olthese factors — or by their 
combi nation, Before collecting and using information on race, religion or other prohibited 
factors, a well-founded and authorized investigative purpose must exist beyond, these 
prohibited factors, 

B) (U) When race or ethnicity is a relevant factor to consider, it should not be the dominant or 
primary factor. Adherence lo this standard will not only ensure that it is never the sole 
factor it wilt also preclude undue and unsound reliance on race or ethnicity in investigative 
analysis. 11 reflects the recognition that [here are thousands and. in some cases, millions of law 
abiding people in American society of the same race or ethnicity as those who are the subjects 
of FBI investigative activity, and it guards against Ltic risk of sweeping them into the net of 
suspicion without a sound investigative fora. 

C) fU) The FBI will not collect or use behavior or characteristics common to a particular racial or 
ethnic community as investigative factors unless the behavior or characteristics bear clear and 
specific relevance to a matter under Assessment nr investigation. This policy is intended lo 
prevent the potential that collecting ethnic characteristics or behavior will inadvertently lead to 
individual identification based solely on such matters, as well as to avoid the appearance that 
the FBI is engaged in ethnic or racial profiling, 

4. 3 ■ 3 (U) Guida \ce on the Use of Ra ce and Ethnic Identity in Assessments 

AND PREDICA TED INVESTIGA TIONS 

(U) Considering the reality of common ethnicity or race among many c riminal and terrorist 
groups, some question bow the prohibition against racial or ethnic profiling is to be effectively 
applied and not violated — in FBI Assessments and Predicated Investigations, The question 
arises generally in two contexts: (i) with respect to an individual or a group of individuals; and 
(is) with respect to ethnic or racial communities as a whole. 


tahw 1 1 


4-12 

UNCLASSIFIED FOR OFFICIAL USE ONLY 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic investigations and Operations Guide 




4.3. 3.1 (U) Individual Race oh Ethnicity as a Factor 

(U) The DOJ Guidance on the Use of Race permits the consideration of ethnic and racial 
identity information based on specific reporting — such as from an eyewitness. Asa general 
rule, race or ethnicity as an identifying feature of a suspected perpetrator, subject, and in some 
cases, a victim, is relevant if it is based on reliable evidence or information — not conjecture or 
stereotyped assumptions, in addition, the DOJ Guidance on the Use of Race permits 
consideration of race or ethnicity in other investigative or collection scenarios if it is relevant. 
These examples illustrate: 

A) (U) The race or ethn icily of suspected members, associates, or supporters of an ethnic-hased 
gang or criminal enterprise may be collected and retained when gathering Ittfccmaiion about or 
investigating the organization, 

B) (U) Ethnicity may be considered in evaluating whether a subject is — or is not — a possible 
associate of a criminal or ternorisl group that i s known to be comprised of members oJ the 
same ethnic grouping as Long as it is not the dominant factor for focusing on a particular 
person. It is axiomatic that there are many members of (he same ethnic group who are not 
members of the criminal or terrorist group: for that reason, there musl be other information 
beyond race or ethnicity that links the individual to ihc terrorist or criminal group or to the 
other members of the group. Otherwise, racial or ethnic identity would be the sok criterion, 
and that is impermissible. 

4.3 .3 .2 (U ) Com m unity Race o r EtHn icity as a Facto r 

4. 3.3.2. 1 (U) Collecting and A ml mm 7 Demogra phics 

(U) The DOJ Guidance on the Use of Race and FBI policy permit the FBI to identify 
locations of concentrated ethnic communities in the field office s domain, if these locations 
will reasonably aid the analysis of potential threats and vulnerabilities, and, overall, assist 
domain awareness for the purpose of performing intelligence analysis. If, for example, 
intelligence reporting reveals that members of certain terrorist organizations live and operate 
primarily within a certain concentrated community of the same ethnicity, the location of that 
community is clearly valuable — and properly collectible — data. Similarly, the locations of 
ethnic-oriented businesses and other facilities may be collected if their locations will 
reasonably contribute to an awareness of threats and vulnerabilities, and intelligence 
collection opportunities. Also, members of some communities may be potential victims of 
civil rights crimes and, for this reason, community location may aid enforcement of civil 
rights laws. Information about such communities should not be collected^ however, unless the 
communities are sufficiently concentrated and established so as to provide a reasonable 
potential for intelligence collection that would support FBI mission programs (e,g., where 
identified terrorist subjects from certain countries may relocate to blend in and avoid 
detection). 

4 3. 3. 2.2 (UJ Geo-Mapping Ethnic/Racia l Demqgra phics 

(U) As a general rule, if information about community demographies may be col levied, it may 
be Ji T7iappcd.'' Sophisticated computer geo- mapping technology visually depicts lawfully 
collected information and can assist in showing relationships among disparate data. By itself. 
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mapping raises no separate concerns about racial or ethnic profiling, assuming the underlying 
information that is mapped was properly collected. It may be used broadly - e.g,, for domain 
awareness of all relevant demographics in the field office's area of responsibility or to track 
crime (rends - or narrowly to identify specific communities or areas of interest to inform a 
specific Assessment or investigation. In each case, the relevance of the ethnic or racial 
information mapped to the authorised purpose of the Assessment or investigation must he 
c [early demonstrated and documented. 

4. 3 1 3 t 2,3 (U) General Ethnic/Raou Beha wan 

(U) The authority to collect ethnic community location information does not extend to the 
collection of cultural and behavioral information about an ethnic community that bears no 
rational relationship lo a valid investigative or analytical need. Every ethnic community in the 
Nation that has been associated with a criminal or national security threat has a dominant 
majority of law-abiding citizens* resident aliens, and visitors who may share common ethnic 
behavior but who have no connection to crime or terrorism (as either subjects or victims). For 
this reason, a broad-brush collection of racial or ethnic characteristics or behavior is not 
helpful to achieve any authorized FBI purpose and may create the appearance of improper 
racial or ethnic profiling. 

4, 3 . 3 , 2 , 4 (U) Specific Attn Relevant ethnic Biha if or 

(U) On the other hand, knowing the behavioral and life style characteristics of known 
individuals who are criminals or who pose a threat to national security may logically aid in 
the detection and prevention of crime and threats to the national security within the 
community and beyond. Focused behavioral characteristics reasonably believed to be 
associated with a particular criminal or terrorist element of an ethnic community (not with the 
community as a whole) may be collected and retained. For example, if it is known through 
intelligence analysis or otherwise that individuals associated with an ethnic-based terrorist or 
criminal group conduct their finances by certain methods, travel in a certain manner, work tn 
certain jobs* or come from a certain pan of their home country that has established links to 
terrorism, those are relevant factors to consider when investigating the group or assessing 
whether it may have a presence within a community. It is recognised that the "fit" between 
specific behavioral characteristics and a terrorist or criminal group is unlikely to be perfect— 
that is, there will be members of the group who do not exhibit the behavioral criteria as well 
as persons who exhibit the behaviors who are not members of the group. Nevertheless, in 
order to maximize FBI mission relevance and to minimize the appearance of racial or ethnic 
profiling, the criteria used to identify members of the group w ithin the larger ethnic 
community lo which they belong must be as focused and as narrow as intelligence reporting 
and other circumstances permit. If intelligence reporting is insufficiently exact so that it is 
reasonable to believe that the criteria will include an unreasonable number of people who are 
not involved, then ii would be inappropriate to use the behaviors., standing alone, as the basis 
for FBI activity. 
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4.3.3. 2. S (U) Exploitive Ethnic Beha vior 

(U) A related category of infoimation that can be collected is behavioral and cultural 
information about ethnic or racial communities that is reasonably likely to be exploited by 
criminal or terrorist groups who hide within those communities in order to engage in illicit 
activities undetected. For example, the existence of a cultural tradition of collecting funds 
from members within the community to fund charitable causes in their homeland al a certain 
time of the year (and how that is accomplished) would be relevant if intelligence reporting 
revealed that, unknown to many donors, the charitable causes were fronts for terrorist 
organizations or that terrorist supporters within the community intended to exploit the 
unwitting donors for their own purposes. 

4,4 (II) Least Intrusive Method 

4.4.1 (U) Overview 

< U) The AGG-Dom requires that the "least intrusive'’ means or method he considered and- if 

reasonable based upon the cireum stances of the investigation used to obtain intelligence or 

evidence in lieu of a more intrusive method. This principle is also reflected in See Appendix B: 
Executive Order 12313* which governs the activities of the United States intelligence 
Community. The concept of least intrusive method applies to the collection of all information. 
Regarding the collection of foreign Intelligence that is not collected as part of the FBI’s 
traditional national security or criminal missions, the AGG-Dom further requires that open and 
overt collection activity must he used w ith USPERs, if feasible. 

(U) fly emphasizing the use of the least intrusive means to obtain information, FBI employees 
can effectively execute their duties while mitigating potential negative impact on the privacy and 
civil liberties of all people encompassed within the investigation, including targets, witnesses, 
and victims. This principle ts not intended to discourage FBI employees from seeking relevant 
and necessary information, but rather is intended to encourage investigators to choose the least 
intrusive but still reasonable — means from the available options to obtain the information. 

(U) This principle is embodied in statutes and DOJ policies on a variety of topics including 
electronic surveillance, the use of tracking devices, the temporary detention of suspects, and 
forfeiture. In addition, the concept of least intrusive method can be found in case law as a factor 
to be considered in assessing the reasonableness of an investigative method in the face of a First 
Amendment or due process violation claim. See dark v. Library of Congress* 750 F.2d 89, 94-5 
(DC. Cir. 1984); Alliance to End Repression v. OYr of Chicago, 627 F- Supp, 1044, 1055 (N.D. 
III. 1985), citing Elrod v. Bums, 427 U S. 347, 362-3 (1976). 

4. 4.2 (0) Genera l A pproa ch to Least In trusive Method Concep t 

(U) Determining what constitutes the least intrusive method in an investigative or intelligence 
collection scenario is both a logical process and an exercise in judgment. It is logical in the sense 
that the FBI employee must first confirm that the selected technique will, 

A) fU} Gather information lhat is relevant to the Assessment or Predicated Investigation; 
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B MU ) Acquire the information within the time frame required by the assessment or Predicated 
Invest igWni 

C) (LI ) Gather the information consistent with operational security and the protection of sensitive 
sources and methods; and 

D] {ll) Gather information in a manner that provides confidence in its accuracy. 

(U) Determining the least intrusive method also requires sound judgment because the factors 
discussed above arc not fixed points on a checklisL They require careful consideration based on a 
thorough understanding of investigative objectives and circumstances. 

4A3 (U) Determining Intrusiveness 

(U) The degree of procedural protection dial established law and the AGG-Dom provide for the 
use of the method helps to determine its intrusiveness. Using this factor, search warrants, 
wiretaps, and undercover operations are very intrusive. By contrast, investigative methods with 
limited procedural requirements, such as checks of government and commercial data bases and 
communication with established sources, are less intrusive. 

(U) The follow ing guidance is designed to assist FBI personnel in judging the relative 
intrusiveness of different methods: 

A | ( L ! ) Nature of the information sought; Investigative objectives generally dictate the type of 
information required and from whom it should be collected. This subpart is not intended to 
address the situation where the type of information needed and its location are sc clear that 
consideration of alternatives w ! ould be pointless. When the option exists to seek information 
from any of a variety of places, however, it is less intrusive to seek information from less 
sensitive and less protected places. Similarly, obtaining information that is protected by a 
statutory scheme (c.g., financial records) or an evidentiary privilege (e.g,. attomcy/clicnt 
communications) is more intrusive than obtaining information that is not so protected. In 
addition, if there exists a reasonable expectation of privacy under the Fourth Amendment (i.e., 
private communications), obtaining that inlbrmation is more intrusive than obtaining 
information that is knowingly exposed to public view as. to which there is no reasonable 
expectation of privacy 

ii) (U) Scope of the information sought: Collecting information regarding an isolated event— 
such as a certain phone number called on a specific date or a single financial transaction — -is 
less intrusive or invasive of an individual's privacy than collecting a complete communications 
or financial ’'profile." Similarly, a complete credit history is a more intrusive view into an 
individual’s life than a lew isolated credit charges. In some cases, of course, a complete 
financial and credit profile is exactly what ihe investigation requires (for example, 
investigations of terrorist financing or money laundering). If so, FBI employees should not 
hesitate to use appropriate legal process to obiain such information if the predicate 
requirements are satisfied. Operational security— such as source protection — may also dictate 
seeking a wider scope of information than is absolutely necessary for the purpose of protecting 
a specific target or source. When doing so, however, the concept of least intrusive method still 
applies. The FBI may oblain more data than strictly needed, but it should obtain no more data 
than is needed ro accomplish the investigative nr operational security purpose. 

C'j (LI ) Scope of the use of the method: Using a method in a manner that captures a greater 
picture of an individual's ora group's activities are more intrusive than using the same method 
ora different one that is focused in time and location to a specific objective. For example, it is 
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less intrusive (o use a tracking device to verify point-to-point travel than it is to use the same 
device to track an individual's movements over * sustained period of time. Sustained tracking 
on public highways would be just as lawful but more intrusive because it captures a greater 
portion of an individual's daily movements. Similarly, surveillance by cloned circuit television 
that checks a discrete location within a discrete time frame is less intrusive than 24/7 coverage 
of a wider area. For another example, a computer intrusion device that captures only host 
computer identification information is far less intrusive than one that captures file content, 

D) (U) Source vj 'the informutwn sought; It is less intrusive to obtain information from existing 
government sources [such as stale, local, tribal, international, or federal partners) or from 
publicly-avu liable data in commercial data bases, than to obtain the same information from a 
third party {usually through legal process) that has a confidential relationship with the 
subject — such as a financial or academic institution. Similarly, obtaining information from a 
reliable confidential source who is lawfully in possession of the information ami lawfully 
entitled to disclose it (such as obtaining an address from an employee of a local utility 
company) is less intrusive than obtaining the information from an entity with a confidential 
relationship with the subject. It is recognized in this category that the accuracy and procedural 
reliability of the information sought is an important factor in choosing the source of she 
information. For example, even if the information is available from a confidential source* a 
grand jury subpoena, national security letter, ex parte order, or oilier process may be required 
in order to ensure informational integrity and accuracy. 

E) (U) The risk of puhlfc exposure: Seeking in formation about an individual or group under 
circumstances that create a risk that the contact itself and the information sought will be 
exposed to the individual’s or group's detriment and/or embarrassment — particularly if the 
method used carries no legal obligation to maintain silence — is more intrusive than 
information gathering (hat does not cany that risk, Interviews with employers* neighbors, and 
associates, for example, or the issuance of grand jury subpoenas at a time when the 
investigation has not yet been publicly exposed are more intrusive than methods that gather 
information covertly. Similarly, interviews of a subject in a discrete location would be less 
intrusive than an interview at, for example, a place of employment or other location where the 
subjecl is known. 

(U) There is a limit to the utility of this list of intrusivencss factors. Some factors may be 
inapplicable in a given investigation and, in many cases, the choice and scope of the method will 
be dictated wholly by investigative objectives and circumstances. The foregoing is not intended 
to provide a comprehensive checklist or even an overall continuum oCintrusiveness, It is 
intended instead to identify the factors involved in a determination of mtmsiveness and to attune 
FBI employees to select* within each applicable category, a less intrusive method if operational 
circumstances permit- In the end, selecting the least intrusive method that will accomplish the 
objective is a matter of sound judgment. In exercising such judgment, however, consideration of 
these factors should ensure that the decision to proceed is well founded. 

4 A. 4 (U) Standa rd for Bala ncing Intrusion a nd Investiga ti ve 

Requirements 

(U) Once an appropriate method and its deployment have been determined, reviewing and 
approving authorities should balance the level of intrusion against investigative requirements. 
This balancing test is particularly important when the information sought involves dearly 
established constitutional, statutory, or evidentiary rights or sensitive circumstances (such os 
obtaining information from religious or academic institutions or public fora where First 


4-17 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Version Dated: 
October 15. 2011 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
§4 Domes! ie I n vestigat tons an d Opera! ions Guide 

Amendment rights arc being exercised}, but should be applied in all circumstances to ensure that 
the least intrusive method if reasonable based upon the circumstances of the investigation is 
being utilized. 

(U) Balancing the factors discussed above with the considerations discussed below will help 
determine whether the method and the extent to which it intrudes into privacy dr threatens civil 
liberties are proportionate to the significance of the case and the information sought. 

(U) Considerations on the investigative side of the balancing scale include the: 

A) (LI) Seriousness of the crime or national security threat; 

B) !IJ) Slrenglh and significance of the mtdhgCTKerinfontnrion to he gained; 

C} {U) Amount of information already known about the subject or group under investigation; and 
D ] (U) Requirements of Operation*] security, including protection of sources and methods. 

(U) If" For example* the threat is remote, the individual’s involvement is speculative, and the 
probability of obtaining probative information is low, intrusive methods may not be justified, 
and* in fact, they may do more harm than good. At the other end of the scale, if the threat is 
significant and possibly imminent (e.g., a bomb threat), aggressive measures would be 
appropriate regardless of intrusiveness. 

(Lf) In addition, with respect to the investigation of a group* if the terrorist or criminal nature of 
the group and its membership is well established {e.g,, el! Qaeda, Kit KEux Klan, Colombo Family 
of La Cosa Nostra), there is less concern that pure First Amendment activity is at stake than there 
would be fora group whose true character is not yet known (e.g.. an Islamic charity suspected of 
terrorist funding) or many of whose members appear to be solely exercising First Amendment 
rights {anti -war protestors suspected of being infiltrated by violent anarchists). This is not to 
suggest that investigators should be less aggressive in determining the true nature of an unknown 
group that may be engaged in terrorism or other violent crime. Indeed, a more aggressive and 
timely approach may be in order to determine whether the group is violent or to eliminate it as a 
threat, Nevertheless* when First Amendment rights are at stake, the choice and use of 
investigative methods should be focused in a manner that minimizes potential infringement of 
those rights. Finally, as the investigation progresses and the subject's or group's involvement 
becomes clear, more intrusive methods may be justified. Conversely, if reliable information 
emerges refuting the individual's involvement or the group's criminal or terrorism connections, 
the use of any investigative methods must be carefully reconsidered. 

(U) Another consideration to be balanced is operational security: if a less intrusive but 
reasonable method were selected, would the subject detect its use and alter his activities — 
including his means of communication to thwart the success of ihc operation V Operational 
security — particularly in national security invest (gallons — should not be undervalued and may* 
by itself, justify covert tactics which, under other circumstances, would not be the least intrusive. 

4.4.5 (U) CONCL USIQH 

(U) The foregoing guidance is offered to assist FBI employees in navigating the often unclear 
course to select the least intrusive investigative method that effectively accomplishes the 
operational objective at hand. In the final analysis, choosing the method that must appropriately 
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balances the impact on privacy and civil liberties with operational needs, is a matter of judgment, 
based on training and experience. Pursuant to the AGCi-Dom. other applicable laws and policies, 
and this guidance, l- U I employees may use any lawful method allowed, even if intrusive, where 
the i turns ivories s is warranted by the threat to the national security or to potential victims of 
crime and/or the strength of the information indicating the existence of that threat. 
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5 (U) ASSESSMENTS 


5. 1 fUJ Overview and Activities A uthorized Pm or to Opening ah 
Assessment 

iV- FOL’G) The AGG-Dom combines “threat assessments 17 under the former Attorney General 's 
Guidelines for FBI National Security Investigations and Foreign Intelligence Collection and the 
"prompt and extremely limited cheeking out of initial leads” under the former Attorney 
General s Gnicfelrn® s on Genera/ Crimes, Rnckeieering Enterprise and Terrorism Enterprise 
investigations into a new investigative category enticed “Assessments.” 

(UWOUQ) All Assessments must be documented in the appropriate form, to include an FD-7], 
Guardian (FD-7 1 a) T or EC, and the form must he placed in one of the following files: 

A) (U//FOUQ) investigative classification as an Assessment file (e,g,, 4 1 5A-WF-xxXXxx)L 

3) (U//FOUO) zero sub^ssessment Me (e g.. 9 Ul-ASSESS-D; L34J-ASSESS; 3 15^0- ASSESS- 
Di; 

C) (LWFOUO) zero classification file (e.g. 196-WF-O). This file may he used if information is 
entered in the IF P-71 or FD-71« and an Assessment is not opened based on that in formal ion; 

D) (UtfFDUG} 800 series f 80 1 -807) classificaiitm file , as discussed in greater detail below; 

E) (U//TCKJQ) Unaddrexsed m irk fife : or 

F) (Uv'/FGUO) existing open or rinsed file . 

(U7FOUO) jYore : In the DIOG, the word ^assessment 7 ' has two distinct meanings The AGG- 
Donn authorizes as an investigative activity an “Assessment," which requires an authorized 
purpose as discussed in this section of the DIOG. The U$IC, however, also uses the word 
“assessment" to describe written intelligence products, as discussed in DIOG Sections 13.2 3 and 
I5.6J.2, 

(U) Assessments authorized under the AGG-Dom do not require a particular factual predication 
but do require an authorized purpose and dearly defined object ive(s). Assessments may be 
earned out to detect obtain information about, or prevent or protect against Federal crimes or 
threats to the national security or to collect foreign intelligence. (AGG-Dotn. Pad ll and Part 
ILAJ 

(U//FOUQ) Although “no particular factual predication'' 1 is required, the basis of an Assessment 
cannot he arbitrary or groundless speculation, nor can an Assessment be based solely on the 
exercise of First Amendment protected activities or on the race, ethnicity, national origin or 
religion of the subject. Although difficult to define, '"no particular factual predication" is less 
than “information or allegation 17 us required for the initiation of a preliminary investigation (PI). 
For example, an Assessment may be conducted when: (i) there is reason to collect information or 
facts to determine whether there is a criminal or national security threat; and ( ii) there is a 
rational and articulable relationship between the staled authorized purpose of the Assessment on 
the one hand and the information sought and the proposed means to obtain that information on 
the other, An FBI employee must he able to explain the authorized purpose and the clearly 
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defined objective! s ), and reason the particular investigative methods were used to conduct the 
Assessment. FBI employees who conduct Assessments are responsible tor ensuring that 
Assessments are not pursued for frivolous or improper purposes and are not based solely on First 
Amendment activity or on the race, ethnicity, national origin, or religion of the subject of the 
Assessment, or a combination of only such factors. (AGG-Dom. Part II) 

(U//FOUO) When employees undertake activities authorized in DIOG Section 5, 1,1 below prior 
to opening an Assessment they must have a reason to undertake these activities that is tied to an 
authorized FBI criminal or national security purpose. 

5.1.1 (U)A ctivities A UTHoniZED Prior to OPENING AN Assess men t 

(U//FOUO) When initially processing a complaint, observation, or information, an FBI employee 
can use the following investigative methods: 

5. 1.1.1 (UJ Public Information 

(U//FOUO) See DIOG section I Oh 

(U//FOUO) Prior to opening an Assessment, consent searches are not authorized. However, if 
in ihc course of processing a complaint or conducting a clarifying inien iew of the 
complainant, the complainant volunteers to provide access to his personal or real property, an 
agent may accept and conduct a search of the Uem{s) or property voluntarily provided. 

5.1.1.Z (U) Records ok Information - FBI and DO] 

(U//FOUO) See DIOG suction IK. 5-2 . 

5. 1.1. 3 [U] Records or Information - Other federal, state, local, tribal, or 

FOREIGN GOVERNMENT AGENCY 

(U//FOUO) See DIOG Section 18.5.3 . 

5X1.4 (U) On-line Services and Resources 

(U//FOUO) See DIOG Section 18,5.4. 

5X1.5 (li) Clarifying Interview 

(U//FOUD) Conduct a voluntary clarifying interview of ihc complainant or the person who 
initially furnished the information. 

(U//FOUO) See DIOG Section lS-5.fr . 

5X1.6 (U) Information Voluntarily Provided by Governmental of Private 

Entities 

(U//FOUG) See DIOG Section 18,5.7 . 

(U//KOUO) With the benefit of a clarifying interview* checking records (existing 1 ' historical 
information), and/or asking an existing CHS about something that he or she already knows, an 
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FBI employee may be able to answer the following question when evaluating the initial 
complaint, observation, or information: Does the complaint observation, or information 
appear to represent a credible basis to open an Assessment, with an authorized purpose and 
clearly defined object! ve(s), or so open a Predicated Investigation consistent with the 
standards set forth in the DIOG? 

(U//FOUO) Intelligence Analysis and Planning: These activities may allow the FBI 
employee to resolve a matter without the need to conduct new investigative activity, for which 
ait Assessment or a Predicated Investigation must be opened. When conducting clarifying 
inferviews and checking records as described above, FBI employees must always adhere u> 
the core values and principles articulated in DIOG Sections 3 and 4 

5/1,2 (U) Documen ta tion Requirements for Record Checks: (Existing 

/historical information referred to in section 5.1.1 ABOVE) 

(U//FOUO) FBI employees must document and retain records checks in an FD-71, FD-71a or 
successor intake form or other system of records if, in the judgment of the FBI employee, there ts 
a law enforcement intelligence or public safety purpose to do so. If such record cheeks are 
documented, they must also be retained in one of the following files: 

A) (U//F0U01 zero classification file when no further investigative activity is warranted; 

B) (U//FOUQ) relevant open or closed zero sub-assessment file; 

C) (U//FOUO) relevant open or closed Predicated Investigation fife; 

D) (U//FOUO) new Assessment or Predicated Investigation fife, when further investigative 
activity is warranted; or 

E) (U//FOUU) toi addressed work fife, 

(U//FOUQ) Additionally, through analysis of existing information, the FBI employee may 
produce products that include, but are not limited to; an Intelligence Assessment, Intelligence 
Bulletin and Geospatial Intelligence (mapping). If. while conducting analysis, the FBI employee 
finds a gap in intelligence that is relevant to an authorized FBI activity, then the FBI employee 
can identify the gap tor possible development of □ ‘"collection requirement.” The FBI employee 
must doeumcnl this analysis in the applicable 805-807 classification file (or other 800-series 
classification file as directed in the Intelligence Policy Implementation Guide ( IPG)). See the 
IPG for tile classification guidance, 

5.1.3 (U) Liaison A ctivities a nd Tripwires 

fL : | Some FBI activities are not traditional investigative or intelligence activities. Activities such 
as liaison, tripwires, and other comm unity outreach represent relationship-building efforts or 
other pre-cursors to developing and maintaining good partnerships. These activities are critical to 
the success of the FBI's mission. DIOG Section 1 1 addresses liaison activities and tripwires. 

5.Z (U) Purpose and Scope 

(U//FQUQ) The FBI cannot be content to wait for leads to come in through the actions of others; 
rather, WC must be vigilant in detecting criminal or national security threats k> the full extent 
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permitted by law, with an eye towards early intervention and prevention of criminal or national 
security incidents before they occur. For example, to carry out the central mission of protecting 
the national security, the FBI must proactively collect information from available sources in 
order to identify threats and activities and to inform appropriate intelligence analysis. Collection 
required to inform such analysis wilt appear as FBI National Collection Requirements and FBI 
Field Office Collection Requirements. Likewise, in the exercise of its protective functions, the 
FBI is not constrained to wait until information is received indicating that a particular event, 
activity or facility has drawn the attention of would-be perpetrators of crime or terrorism. The 
proactive authority conveyed to the FBI is designed for, and may be used by, the FB! in the 
discharge of tliese responsibilities. The FQ] may also conduct Assessments as part of its special 
events management responsibilities. (AGG Dom, Pan II) 

(U) More broadly, detecting and interrupting criminal activities at their early stages, and 
preventing crimes from occurring in the first place, is preferable to allowing criminal plots to 
come to fruition. Hence, Assessments may also be undertaken proactively with such purposes as 
detecting criminal activities' obtaining information on individuals, groups, or organizations of 
possible investigative interest, either because they may be involved in criminal or national 
security-threatening activities or because they may be targeted Ibr attack or victimization in such 
activities; and identifying and assessing individuals who may have value as confidential human 
sources. (AGG-Dom, Part II). 

{U/y'FOUO) As described in the scenarios below. Assessments may be used when an ‘allegation 
or information" or an "articulable factual basis'" (the predicates for Predicated Investigations) 
concerning crimes or threats to the national security Is obtained and the matter can be checked 
out or resolved through the relatively non-intrusive methods authorized in Assessments (use of 
least intrusive means). The checking of investigative leads in this manner can avoid the need to 
proceed to more formal levels of investigative activity (Predicated Investigation), if the results of 
an Assessment indicate that further investigation is not warranted. (AGG-Dom, Part II) 
Hypothetical fact patterns arc discussed below: 

5, 2,1 (U) Scenarios 

(UJFOUQ) Scenario 1 : Based upon a newspaper or trusted publication article related to 
an emerging criminal problem, an FBI employee wishes to analyze information/data 
already contained in FBI data systems, query ChoicePoinl, NC1C and search the Internet 
for information to identify and understand trends, causes, and potential indicia of criminal 
activity and other threats to the United States that would not be apparent from the 
investigation of discrete matters alone, 

(U//FOUO) Response f : The FBI employee cars query and analyze record checks in 
computer database systems, including the Internet, without opening an Assessment 
pursuant to Section 5. LI ,1-5, The FBI employee may produce products that include, but 
arc not limited to. Intelligence Assessments, Intelligence Bulletin and Geospatial 
Intelligence {mapping). Additionally, if the FBI employee identifies a gap in intelligence 
relevant to an authorized FBI activity, the FBI employee may submit the gap for possible 
development as a "collection requirement." As specified in Section 5.1.2 above, the FBI 
employee may document this analysis in the applicable 803-807 classification file (or 
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other SpO-Benes classification file as directed in the IPG), See the IPG for file 
class ificatton guidance, 

(U//FOUO) Because the FBI employee has not conducted any new investigative activity 
or used an investigative method described in DIOG Sections 18,5 38-7 these queries 

can he made without opening an Assessment. 

(U/FOUO) Sctttariv 2 : A marina owner contacts the local FBI office stating that five 
Middle Eastern males have just rented a boat for three days and asked for marine charts. 

(U//FOVO) RestHutse 2 : Without additional information, it would not be appropriate to 
conduct an Assessment, because there is no indication of criminal conduct, a threat to the 
national security, or information that might be foreign intelligence information. The Fact 
that the men are Middle Eastern is not, standing alone, a reason to open an Assessment, 

(If/FOUO) Samaria J : A marina owner contacts the local FBI office stating that five 
males, who appear to be Middle Eastern, have just rented a boat For three days and asked 
for marine charts, The owner also stated the men asked him to circle the military 
installations and nuclear power plants on the marine charts, 

(U//FOCO) Response J ; Because of the potential for either criminal activity or a threat to 
the national security, this scenario provides an authorized purpose for conducting an 
Assessment. The FBI can conduct an Assessment for the purpose of ascertaining the 
intentions of the five males. In this scenario, the men’s national origin is not the 
motivating factor for the Assessment, ii could, however, be a factor the FBI would 
consider in conducting the Assessment if relevant intelligence makes their national origin 
relevant (for example, if existing intelligence reporting suggested that A1 Qaeda wras 
planning an attack using boats as a means of attack), 

(U/FOUO) Scenario 4 : A field office wishes to acquire the following mfaraiation/data 
within its Area of Responsibility (AGR) in order to proactively identify threats and 
domain awareness, including: (i) general demographics (e.g., general population to 
include concentrations of racial and ethnic groups; location of religious institutions); (ii) 
location of violent gang activity; (iii) residences of parolees and probationers; and (iv) 
location of military installations and defense contractors. After acquiring this 
informal on/daLa* the field office wants to map it. 

( UJ/FOVO J Rexpanse 4 : A Type 4 Assessment with an authorized purpose lor gathering 
this data must be opened so that a field office can acquire all of the above information. In 
this scenario, the authorized purpose would be to facilitate intelligence analysis and 
planning. In addition to an "authorized purpose.” a field office must also have a clearly 
defined objectives') for acquiring the particular information and data, which may not be 
based solely on activities protected by the First Amendment or on race, ethnicity, national 
origin or religion. The FBI employee must document this AOR analysis in the applicable 
81&A through F or 81 5 H classification file (or other KOO-scries classification file as 
directed in the IPG), See the IPG for file classification guidance. 

(U//FOUO) Scenario 4 may only be opened as an Asscssment. 


5-5 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
§5 Domestic Investigations pnd Operations Guide 

(U/FOUO) Scenario J> While cn-mutc to work in the morning an FBI employee notices 
two individuals in a parked ear in the parking lot of a closed bank. The bank is not 
scheduled id open for several hours. There is nothing peculiar about the situation other 
than the fact that the individuals appear to just be sitting there. The bus arrives and the 
FBI employee goes to work- The nest day the FBI employee notices the same two 
individuals in the same car just sitting in the lot, 

(U//FOUO) Response St It is unusual for people to sit in a vacant parking lot hours 
before a business is scheduled to open, The individuals might simply be meeting there to 
caipool to work, or they may he conducting preopcrational surveillance of the bank and 
surrounding area. The facts as noted do not create the inference or allegation of criminal 
activity sufficient to open a Preliminary investigation. In this situation „ however, the FBI 
employee can conduct an Assessment to determine whether the individuals’ presence is 
lawful or not, 

(U//POUO) Scenario 5 may only be opened as an Assessment. 

(L'/F0t- O) Scenario ft : An FBI employee receives a complaint from an individual 
regarding a letter that was faxed to him from an alleged foreign prince. The letter 
involved the recovery of a large sum of money if the individual will provide his bank 
account information to the prince by a telephone number provided in the letter, I he letter 
states the individual should not tell law enforcement about the possible recovery because 
the money was embezzled from the foreign government. 

(LY/FOUO) Response 6 . Because this is likely a fraud, the FBI can conduct an 
Assessment for the purpose of determining the validity of the complaint, identifying the 
subject the contents of the letter, and to determine whether further investigative action is 
appropriate. This scenario also meets the standard to open a Preliminary Investigation, 

(U/F0UO) Si Liuirio 7 : The FBI receives an- anonymous letter threatening a "dirty bomb" 
attack: however, the letter contains inaccurate information about the process for making a 
“dirty bomb." 

(V//FOVO) Response T Because of the potential for criminal conduct and a threat to the 
national security, this scenario provides an authorized purpose for an Assessment. The 
FBI Clin conduct an Assessment Ebr the purpose of identifying the drafter of the 
threatening letter and potential targets or vulnerabilities to criminal activities or threats to 
the national security. This scenario also meets the standard to open a Preliminary 
Investigation. 

fV/FOVO) Scenario ft : An FBI employee in an FBI field office receives a memorandum 
from a flight school indicating that it has received a large number of students registering 
for Bight school to learn to fly large commercial airplanes who seem unusually ill- 
prepared with minimal relevant aviation skills. 

(Uf/FQUO) Reouotse S ; Because of the potential for criminal conduct and a threat to the 
national security, this scenario provides an authorized purpose for an Assessment. This 
scenario also meets the standard to open a Preliminary Investigation. 


V^psloti Dated 
October 15, JO II 


5-6 

UNCLASSIFIED FOR OFFICIAL USE ONLY 


UNCLASSIFIED FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide §5 

5.3 (U) Civil Liberties anp Privacy 

(UJ The pursuit of legitimate goals without infringing upon the exercise of constitutional 
freedoms is a challenge that the FBI meets through the application of sound judgment and 
discretion, In order to ensure civil liberties are not infringed upon through Assessments, every 
Assessment must have an authorized purpose and clearly defined objective(s). The authorized 
purpose and clearly defined objectives ) of the Assessment must be documented and retained as 
described in this section and in DIQG Section 14, 

(U) Even when an authorized purpose is present, an Assessment could create the appearance that 
it is directed at or activated by constitutionally- protected activity, race, ethnicity, national origin 
or religion particularly under circumstances where the link to an authorized FBI mission is not 
readily apparent. In these situations, it is vitally important that the authorized purpose and the 
dearly defined objective^}* as well as the use of any investigative mcihtHls. are well 
documented, 

(U) No investigative activity, including Assessments, may be taken solely on the basis of 
activities that are protected by the First Amendment or on the raee, ethnicity, national origin or 
religion of the subject, or a combination of only such factors. If an Assessment touches on or is 
partially motivated by First Amendment activities, or by race, ethnicity, national origin or 
religion, or a combination of only such factors, it is particularly important to identify and 
document the basis for the Assessment with clarity, 

(TJ//FOUG) Example ; Individuals or groups who communicate with each other or with members 
of the public in any form in pursuit of social or political causes such as opposing war or foreign 
policy, pretesting government actions, promoting certain religious beliefs, championing 
particular local, national, or international causes, or advocating a change in government through 
non-criminal means, and actively recruiting others to join their causes — have a fundamental 
constitutional right to do so. An Assessment may not be opened based solely on the exercise of 
these First Amendment rights, If, however, a group exercising its Firs! Amendment rights also 
threatens or advocates violence or destruction of properly, an Assessment would be appropriate. 

(U) The AGG-Dom require that the "least intrusive" means or method be considered and — if 
reasonable based upon the circumstances of the investigation- used in lieu of more intrusive 
methods; to obtain information, intelligence and/or evidence. This principle is also re fleeted in 
Executive Order 12333 (sec Appendix B), which governs the activities of the U51C- Executive 
Order 1 2333 lays, out the goals. directions, duties and responsibilities of the US1C, The concept 
of least intrusive means applies to the collection of all information, intelligence and evidence, not 
just that collected by those aspects of the FBI that are part of the intelligence community. 

(U) By emphasizing the use of the least intrusive means to obtain information, intelligence, 
and/or evidence. FBI employees can effectively execute their duties while mitigating the 
potential negative impact on the privacy and civil liberties and the damage to the reputation of all 
people encompassed within the investigation or Assessment, including targets, witnesses, and 
victims. This principle is not intended to dliscourage FBI employees from seeking relevant and 
necessary intelligence, information, or evidence, but rather is intended to encourage FBI 
employees to choose the least intrusive — but still reasonable based upon the circumstances of the 
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investigation— means from the available options to obtain the information. (AGG-Dom, Part 
I.C 2) 


5.4 (U) Five Types of Assessments (AGG-Dom* Part II,A3.) 

5.4.1 (U) Assessment Types 

(U) There are five (5) authorized types of Assessments that may be carried out for the purposes 
of detecting, obtaining information about, or preventing or protecting against Federal crimes or 
threats to the national security or to collect foreign intelligence, The types of Assessments are: 

A | |U) Type I & 2 I Seek information, proactively or in response to investigative 
leads, relating to activities - or the involvement or role of individuals, groups, or organisations 
relating lo those activities constituting violations of Federal criminal law or threats to the 
national security; 

B) (U) Trim J Assessment ; Identify, obtain and utilize information about actual or potential 
national security threats or Federal criminal activities, or the vulnerability to such threats or 
activities; 

C) (U) Type 4 Assessment : Obtain and retain information to inform or facilitate intelligence 
analysis and planning: 

D) CLP Type 5 A\sessmeni : Seek information to identify potential human sources, assess their 
suitability, credibility, or value of individuals as human sources; and 

El (U) Type ft Assessment : Seek information, proactively or in response to investigative leads, 
relating to matters of foreign intelligence interest responsive to foreign intelligence 
requirements, 

5.5 (U] Standards for Opening or Approving an Assessment 

(LWFGUO) Before opening or approving an Assessment, an FBI employee or approving official 
must determine whether: 

A) (TJ//FOUO) An authorized purpose and dearly defined objectives) exists for the conduct of 
the Assessment; 

B ) (LT//FOUO) The Assessment is not based solely on the exercise of Feral Amendment activities 
or on the race, ethnicity, national origin or religion of the subject, or a combination of only 
such factors: and 

C) (U//FDUO) The Assessment is an appropriate use of personnel and financial resources. 


* (U//FOUQ) In the original DIQG £ \ 2/l6ttOOB) r types l uml 2 were considered to be separate Assessment types. 
Because they, however, have many comma nali Lies, they Were merged into one type (named a 'Type 1 & 2 
Assessment"! far purposes of this version of the f>[OCi. Hence, there are now five, no! six* types of Assessments. 


Version Datnd 
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5.6 (U) Position Equivalents, Effective Date, Duration, Documentation, 

Approval, Notice, File Review and Responsible Entity 

5. 6.1 (U) Field Office and FBI HQ Position Equiva len ts 

(U//FOUO) FB1HQ and FBI field offices have the authority to conduct all Assessment activities 
as authorized in Section 5.4 above Position equivalents for field office and FBI HQ personnel 
when FBIHQ opens, conducts, or closes an Assessment are specified in DIOG Section 3. L L 

5. 6.2 (U) Effective Da te of Assessments 

(U//FQUO) For all Assessments, the effective date of the Assessment is the date the final 
approval authority approves the FD-7 1, Guardian (FD-7 la) or RC. Documenting the effective 
date of an Assessment is important for many reasons, including establishing time frames for 
justification and file reviews, and extensions. The effective date of the firm] approval authority 
occurs when: 

A) (U//FOUO) Far T*P< I & 2 .Wssmcnts ; the SSA or SlA open* and assigns the FD-7 1 or 
Guardian (FD-7ta) to the employee; 

(U//FOUU) Note; in Type 1 & 2 Assessments only, employees do not need to obtain 
supervisory approval prior to opening the Assessment. If, however, oral approval is obtained, 
employee!! must memorialize the oral approval date in the body of the FD-7 1 or Guardian 
(FD-TIah 

0) (IWFOUO) For Type 3-6 Assessment* : the S5A, SI A, or the PI opens and assigns the 
Assessment by; (i) the electronic signalurc/dalc generated by Senlincl - or successor case 
management sysiem; or (ii) handwriting his/her initials and date on the EC; or 

C) (U//FOLIO) For Sensitive 1 lives Him live Matters tSLMl Assessments : the SAC (or SC} 

authorizes the Assessment to be opened and assigned to an FBI employee hy: (S) approving the 
FD-7 S or Guardian t.FD-71 a); (ii) the electronic signature, -'dale generated by Sentinel - or 
successor case management system; or ( in) hand writing his/her initials and date on ihe EC 
(See DIOG Seel ions S.7 and 3 0). 

5.6.3 (U) Assessment Types 

(U//FOUG) The applicable duration, documentation* approval level, notice, justification/fi I e 
review , and responsible entity requirements for each of the five (5) types of Assessments are 
discussed below. 

(U//FOUO) In all types of Assessments, investigative [eads t cither Action Required or 
Information Only, may only be set by EC, FD-7I or Guardian (FD-71a). 

5.6.3, 1 (IQ Type 1 & 2 Assessments 

(IT) Type L & 2 Assessment defined : Seek information, proactively or in response lo 
investigative leads* relating to activities - or tltc involvement nr role of Individ oafs, 
groups, or organizations In those activities - constituting violations of Federal criminal 
law or threats to the national security (Le„ the prompt checking of leads on individuals, 
activity* groups or organizations}* 
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(U//FOUQ) See Section 5. 1 I below for intelligence collection (ii.c, t incidental collection) and 
documentation requirements. All incidental collection must be documented in the 81 51 Held 
office file. 

5.6.3.13 (U) Duration 

(U//FOUO) There is no time limit fora Type 1 & 2 Assessment, but it is anticipated that such 
Assessments will be relatively short. 

5. 6.3 . 1.2 (V) Documenta nos 

(U//FOUO} The authorized purposed) and dearly defined objective(s) for the Type l St 2 
Assessment must be documented in the FD-71 or Guardian. Guardian (FD-7Ia) must be used 
tn document Type 1& 2 Assessments that pertain to international terrorism, domestic 
terrorism, weapons of mass destruction terrorism, and cyber terrorism. The electronic FD-71 . 
as discussed below, must be used to document all other Type ] & 2 Assessments (i,c\, 
criminal, other cyber). 

(U//FOUO) An FBI employee must also document in the FD-71 or Guardian (FD-71 a) the use 
of. or the request and approval for the use of. authorized investigative methods. By exception, 
an EC may be required to document the use and approval of particular investigative methods. 
The results of the use of investigative methods must also be documented in the FD^7 1 or 
Guardian, or by exception, in an EC. The completed FD-71 or Guardian requires supervisor 
approval before being uploaded. 

(U//FOUG) All investigative documents (FD-302's* ECs, surveillance Eogs, etc.) must be 
referenced, and attached or linked electronically to the appropriate FD-71 or Guardian, 
consistent with the instructions in the FD-71 and Guardian programs. 

(U'TFOUO) Type l & 2 Assessments that are not converted to a Predicated Investigation 
must be uploaded to a “zero" sub-assessment file (e g., 9 1 -G-A5SESS-D, 1 5-0- ASSESS) 
within the appropriate classification as described in Section 5.14. The DIOG prohibits the use 
of donliut files or administrative files to document investigative activity. (See DlOti 
Appendix i \ 

5. 6.3 13 (U) Approval ro Open 

(UV/FOUQ) An FBI employee may open a Type I & 2 Assessment without supervisor 
approval. After receipt of the complaint or other information that triggers the Assessment, the 
FBI employee must complete an FD-71 or Guardian as soon as practicable to document this 
type of Assessment. The 55A or SIA must either assign an FBI employee to conduct the 
Assessment based upon information contained in the FD-71 or Guardian or close the 
Assessment. The opening dale for Type 1 & 2 Assessments is the date the SSA or SIA assigns 
an FBI employee to conduct the Assessment. The FBI employee and SSA or SIA must apply 
the standards for opening or approving a Type l & 2 Assessment contained in DIOG Section 
5.5. 


Verctaft patM 
CWobfrr IS, 201 1 


5-10 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


§5 


5. 6. 3. J. 4 (U) Sensitive Invest iga tive Ma tters (SIM) 

(U//FOUO) As soon as practicable, but not more than five (5 1 business days after determining 
the Type 1 & 1 Assessment involves a sensitive investigative matter I SIM), the matter must 
be reviewed by the CDC and. approved by the SAC. The term “sensitive investigative matter" 
is defined in D1GG Section 5.7 and DJOCi Section 10. The FD-71 or Guardian has selection 
options in the form to designate the Assessment as a “Sensitive Investigative Matter 1 " and to 
document the required review and approvals. 

5.6.3. 1.5 (U) Notice 

(U//FOUO) There is no requirement to provide notice to FBI HQ or DOJ of opening or closing 
Type 3 & 2 Assessments. 

5. 6 . 3. 1.6 (U) Justified tion Review 

(U//FGUO) If a Type 1 & 2 Assessment is not concluded within 3(3 days, the SSA or SIA 
must conduct a justification review every 50 days (recurring until the Assessment is dosed) in 
accordance with DIOG Section 1.4,4, 

5. 6.3. l. 7 (U) Responsible Entity 

(U'VFOUO.) A Type I &. 2 Assessment may be conducted by an investigative field office 
squad or FBI HQ operational division. 

5. 6.3. 1.8 (U) Examples/Scena rios of Type 1&2 Asseismejvts 


5.63. 1.8.1 (II) Example 1 

(U//FQUQ) Scenario : A series of news articles in May and June report on a shakcup in 
Gloucester County government. The June 1 8th front page article was captioned ’County 
Government Hijacked by Board of Supervisors. 11 One of the elected Supervisors (X), 
according to the story, has a familial relationship to a prominent local developer, who has 
submitted a zoning request to the county board of supervisors for a 3200 unit residential 
and golf course community. 

(U//FOUO) Re.'inan.’ie : Without supervisor approval, an FBI employee on the Public 
Corruption Squad may begin to track the story by conducting routine internal FBI 
database checks for possible business affiliations, personal family relationships, criminal, 
history* and arty references in FBI Hies to the Developer or the County Supervisor X. 

(U//FOUO) The FBI employee can conduct record checks (search FBI'' DOJ records. 
USJC records, arty other US government records, state or local records), and Internet 
searches (whether open-source or paid-for services) without opening an Assessment. 
Because the FBI employee is reviewing existing information already in its possession or 
to which it has lawful access* this does not constitute new investigative activity. (Sec 
Section 5, LI) Tf an employee does nol establish an authorized purpose to open an 
Assessment (or Predicated Investigation) after conducting these records checks or 
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Internet searches, the FBI employee should refer to Section 5. 1.2 above for documenting 
these activities, 

(U//FOUQ) Without superv isor approval, the FBI employee may ask an open confidential 
human source (CHS), whose placement is such that he 1 she might have relevant 
knowledge, what he/she knows about the Developer and County Supervisor X. If an 
Assessment is opened, the FBI employee may also task the CHS (without supervisor 
approval ) to contact the Developer for the purpose of seeking information about Lhc 
Developer's future project plans. In either instance the FBI employee must ensure that he 
or she is using the least intrusive method that is reasonable based upon the circumstances 
of the investigation. Because this is a sensitive investigative matter (domestic public 
official), as soon as practicable, but rot more than five (5) business days after the SIM 
arises, it must be brought to the CDC tor review and to the SAC for approval to continue 
the Assessment. The initiation date for this type of Assessment is the date the SAC 
approves the Assessment. The FBI employee must memorialize the contact with the CHS 
in DELTA and complete an FD-7L 

5,6.3. 1 *8.2 (U) Example 2 

( U//FOUO) Scenario : An FBI employee receives a telephone call from an anonymous 
caller who complains about a new emigre Imam at a local mosque. The caller says the 
Imam has been making radical statements in public and private conversations and has 
openly invited all male mosque member!; between the ages of 16 and 40 to join a 
Wednesday night '’awakening* meeting. Afterwards, according to the caller, a few select 
attendees are chosen to go to another room where, the caller believes, they talk about 
conducting holy war against the United States. 

(U//FOUO) Response : Because this is a terrorism -related item* the FBI employee must 
enter the information into Guardian and be assigned a Guardian lead by the supervisor. 
Additionally, because this Assessment Envoi ves a sensitive Investigative matter (a 
religious figure), as scion a practicable, but not more than five (5) business days after the 
SIM arises, [his matter must be forwarded to the CDC for review and the SAC For 
approval. Without supervisor approval, but consistent with the requirement to use the 
least intrusive method feasible, the FBI employee may also contact a CHS to determine 
whether the CHS knows or has heard anything about the new Imam, The FBI employee 
must memorialize the contact in DELTA. Investigative methods used in this Assessment 
must be documented in Guardian, and if any methods required supervisor approval, those 
approvals must also be documented in Guardian. 

5.6.3 2 [U] Tvpe 3 As s essm ents 

(U) Type 3 Assessment defined : Identify, obtain and utilize information about actual nr 
potential national security threats or Federal criminal activities, or the vulnerability to 
such threats or activities. [See AGG-Dom, Part JLA.3.b| 

(U '. FOUO) Type 3 Assessments may be used to analyze or determine whether particular 
national security or criminal threats exist within the AOR and whether there are victims or 
targets within the AOR w ho are vulnerable to any such actual or potential threats. The 
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authorized purpose and dearly defined objectives I of a Type 3 Assessment must be based on 
or related to actual or potential Federal criminal or national security targets, threats, or 
vulnerabilities. While no particular factual predication is required, the basts of the Assessment 
cannot be arbitrary or groundless speculation, nor can (he Assessment be based solely on the 
exercise of First Amendment protected activities or on race, ethnicity, national origin or 
religion, or a combination of only such factors. 

(U//FCMJO) Whenever a Type 3 Assessment identifies and begins to focus or a specific 
individual(s), group! s) or organizations), whose activities may constitute a violation of 
Federal criminal law or a threat to the national security, a separate Type I & 2 Assessment or 
a Predicated Investigation must be opened on that individual, group or organization. 

(U//FOUO) A Type 3 Assessment may not be opened based solely upon the existence of a 
collection requirement, and addressing a collection requirement cannot be the authorized 
purpose of a Type 3 Assessment. Information obtained during the course of this type of 
assessment (or any other Assessment or Predicated Investigation) may, however, be 
responsive to collection requirements and collection requirements may be used to inform and 
help focus a Type 3 Assessment (or any other Assessment or Predicated Investigation) while 
also providing information about potential targets, threats and/or vulnerabilities. 

(U//FGUO) Investigative activity undertaken during Special Events assessments (such as 
"Joint Threat Assessments," "Joint Special Event Threat Assessments," and "Special Events 
Threat Assessments") must be documented using a Type 3 Assessment opened under the 
relevant investigative classification (eg.. 415, etc) or the 8001 classification. Opening a Type 
3 Assessment for these events docs not eliminate the requirement to use the 3CK)A 
classification ay a control file for administrative functions related to the special event: the 
3 00 A control file cannot be used to maintain or upload investigative/ Assessment documents. 

(U//FDUO) A Type 3 Assessment may ngt be used for the purpose of collecting positive 
foreign intelligence, although such intelligence may be incidentally collected. Positive foreign 
intelligence can only be intentionally collected pursuant to DIOG Sections 5.6 3.5 (Type 6 
Assessment) and/or Section 9. 

(U//FOUO) See Section 5.11 below for intelligence collection, (i.c., incidental collection) and 
documentation requirements. All incidental collection must be documented in the 81 51 field 
office file. 


5,63,2,1 (U) Duration 

(U//FOUO) A Type 3 Assessment may only be opened w ith prior superv isor approval. The 
effective date of the Assessment is the dale the final approval authority approves the RC as 
specified in Section 5.6.2 above, A Type 3 Assessment may continue for as long as necessary 
to achieve its authorized purpose and clearly defined objectively) Although a Type 3 
Assessment is not limited in duration, when the dearly defined objectl ve(s) have been met, 
the Assessment must be dosed with an EC approved by the supervisor. 
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5,63.2.2 (V) Documenta tion 

(U//FOUO) The title/caption of the opening EC must contain the word “Assessment," and the 
synopsis must identify the authorized purpose and the clearly defined objectivefs) of the 
Assessment. If appropriate, the Details section of the EC may provide more details regarding 
the authorized purpose and dearly defined objectively)- If additional objectives arise during 
the course of the Assessment, they must be documented with an EC and approved by the 
supervisor, If at the time of the opening* or at anytime thereafter, the Assessment involves a 
sensitive investigative matter, the title/caption must also contain the words “Assessment" and 
“Sensitive Investigative Matter." (See DIOG Section 10.4) 

(U//FOUO) Additionally, if DIOG Section 18 requires documentation of the approval to use 
an authorized investigative method in an Assessment* sueh requests, as well as all uses of 
those methods, must be documented by an EC. 

(U//FOUO) If opened by the Dl. a Regional Intelligence Group (RIG), ora Field Intelligence 
Group (FIG), the Type 3 Assessment must be documented in the appropriate 8011-8071 or 
8151 classification file. A Type 3 Assessment opened by an investigative division or 
investigative field office squad must be documented in the appropriate investigative 
classification Assessment file. The DIOG prohibits the use of control files, or administrative 
Hies to document investigative activity. (See DIOG Appendix, J) 

5.6.3.23 (U) Approval 

(U//FOUO) All Type 3 Assessments must be approved in advance by a supervisor and opened 
by EC- Notwithstanding any other provision in the DIOG* a Type 3 Assessment cannot be 
opened based tin oral approval. The supervisor must review and approve a Type 3 Assessment 
in accordance with the standards set forth in Section 5.5. Additional approval requirements 
apply to SIMs, as described below. 

5.63.2,4 { V) Sensitive Investiga n vt Af a ti ers ( SIM ) 

(U//FOUO) If the Assessment involves a sensitive investigative matter, the CDC must review 
and the SAC must approve the Assessment prior to opening. If a SIM arises after the opening 
of a Type 3 Assessment, Assessment activity may continue, but the matter must be 
documented in an EC reviewed by the CDC and approved by the SAC as soon as practicable 
but not more than five (5) business days after the SIM arises. The term “sensitive 
investigative matter" is defined in DIOG Sections 5.7.1 and Section 10. 

(U//FOUO) Investigative methods that may be used in Assessments are set forth in DIOG 
Section 18. 

(U//FOUO) As specified in division PGs, there may be agreements (e r g.„ Memoranda of 
Understanding, Treaties) that require additional coordination and approval prior to conducting 
certain activities. 
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5 6, 3 >2,5 {V} Notice 

(U/FOUO) There is no requirement to provide notice to FRIHQ or DOJ of opening or dosing 
Type 3 Assessments, 

5. 6.3.2< 6 (U) File Review 

(U//FOUO) A Type 3 Assessment requires file reviews in accordance with DIOG Section 
3.4.4 r 


Sr 6,3,2, 7 ( If) Responsible EnTitv 

(U//FOUO) A Type 3 Assessment may be opened and conducted by FIGs, RIGs. the DL field 
office investigative squads, and FBI (IQ operational divisions. The nature of the Assessment 
dictates the file classification into which the Type 3 Assessment is opened. Assessments 
conducted by the Dl, FIGs or RIGs must be opened in the appropriate 8001 - H07L or 81 51 
file classifications All other Assessments must be opened in the appropriate investigative file 
classification. 

5 . 6.3.2 8 ft') Examples of Type 3 assessments 
5.6.3, 3. H. I (U) Example 1 

(U/FOUO) Scenario ; A state awards substantial grant money from Congress for road 
improvements over a 1 0 year period, The local population and business trends do not 
appear to support a need for such improvements, and the state has a history of corruption 
in awarding contracts. A review of the new spaper and the Internet shows a pattern of 
similar awards from the same slate office over the past six months. 

(U//FOUO) Rexpome : The field office may open a Type 3 Assessment to determine the 
potential vulnerability of the grant process to corruption fe.g., misdirection of funds or 
kickbacks to public officials). If the Assessment is likely to obtain information relevant to 
a SIM as defined in DIOG Section 10 (e.g., possible kickbacks to a domestic public 
official), the FBI employee must obtain CDC review and SAC approval be tore opening 
this assessment, or if the SIM develops after the Assessment is open, such review and 
approval must be obtained within 5 business days. If w hile conducting this Assessment 
information is obtained that addresses a national or field office collection requirement, 
that information should be disseminated to the appropriate entity. 

5.6J.2.8J (U) Example 2 

(U/FQUO) Scenario; A field office learns, by reading an Intelligence Bulletin, that a 
foreign intelligence service has recently '‘stepped up" ils efforts to collect technical 
information about a particular fype of avionic equipment. Other available intelligence 
community products confirm the foreign intelligence service's interest in the equipment 
and report that the service has sought to identify engineers of a particular nationality with 
aecess to the technology and with possible interest in assisting the development for their 
former country. 


5-15 

lWCZA£flFf£Z? 6{fjf<?AZF 


timber tS, MU 


UNCLASSIFIED FOR OFFICIAL USE ONLY 
§ 5 Domes! te In vesli gallon s and Qperati ons Guide 

(UATFOUQ) Response : The field office may open a Type 3 Assessment to determine 
whether any manufacturers or engineering facilities within its territory produce or 
contribute to the design or production of the avionic equipment sought and whether they 
or their employees may be a target of or vulnerable to the foreign intelligence service's 
ai tempts to exploit this technology, If while conducting this Assessment information is 
obtained that addresses a national or field office collection requirement, that information 
should be disseminated to the appropriate entity. 

5 .6.3. 2.8.3 (L) KXAMM.t 3 

(U/FOUQ) Scentaiu : Local newspapers report that a number of ethnic restaurants in a 
field office’s territory have recently been vandalized and one restaurant owner has 
suggested that a Jion-lraditional organized crime group may be trying to extort these 
restaurants. 

(U//FOUO) Response : The field office may open a Type 3 Assessment to determine 
whether the non- traditional organized crime group is trying to establish a prewr.ee within 
the field office's AOR (making businesses in the AOR potential targets of or vulnerable 
to the group’s extortionate behavior), The field office would want to acquire information 
to determine whether the vandalism is attributed to any organized crime group and 
whether the vandalism appeared to have a purpose. If such a link is established and a 
specific group or persons are identified as likely responsible for the vandalism, the field 
office should determine whether a Type I & 2 Assessment ora Predicated Investigation 
should be opened or those identified subjects. Moreover, if the Assessment obtains 
information that is responsive to a national or field office collection requirement, that 
information should be disseminated to the appropriate entity. 

6.6.3.2.5.4 (U) Example 4 

(U/FOUO) Scenario : A field office receives an fl R originating from a neighboring field 
office that identifies an Outlaw Motorcycle Gang (OMG) prominent in the originating 
officers domain. The receiving office is unaware of any reports or investigations 
indicating the presence of the particular OMG within its domain, but it would like to 
know whether the particular OMG has established such a presence. A Type 3 Assessment 
could be opened to determine whether the particular OMG has established a presence in 
the receiving field office's, domain and the extent to which the office's domain may be a 
target of or vulnerable to criminal activities of ibis OMG (c.g., the extent and scope of 
this threat). 

(U/TOUG) Response : If, through this Assessment, it is determined that the particular 
OMG has, is. or is about to engage in criminal activities, and the field office wants to 
investigate the OMG's criminal activities, it must close the Type 3 Assessment and open 
a Type I & 2 Assessment or a Predicated Investigation on the particular OMG 
(depending upon the level of predication developed), 

(U7/PQUQ) Response : If the Type 3 Assessment was opened to determine whether any 
OUfkw motorcycle gangs were operating within the AOR (rather than to determine 
whether the specific OMG was operating), and discovers a particular OMG is involved ill 
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criminal activities, the field office would be required to open a Type I & 2 Assessment or 
a Predicated investigation on that identified particular GMG (depending upon the level of 
predication), In this scenario, the Type 3 Assessment could remain open, however* to 
determine whether any other O Mi is pose a threat within the domain. 

5.63,2 AS ( U ) Exam PLE 5 

(IRFOUO) Scenario : The annual North American International Auto Show (NA1AS) will 
take place in a local field office AGR, This event will attract individuals from all over the 
world. The field office needs to assess whether the special event itself may be a target or 
v ictim of Federal criminal violations or national security threats and to w hat extent other 
entities within the AQR may be exposed to such crimes or threats, 

(U//FOUO) Resfiome ; To determine whether the event may be a target of or vulnerable 
to a terrorist attack, a Type 3 Assessment may be opened. If there is adequate information 
regarding a particular person or group of persons posing a threat to this event, then a 
Type 1& 2 Assessment or a Predicated Investigation can also be opened on that specific 
person or group. 

5.6.33 (If) Type 4 Assessments 

111) fvue 4 Assess me ill defined ; Obtain and retain information to inform nr facilitate 
intelligence analysis and planning. [ACCTDom, Part IV | 

(U//FQUQ) A Type 4 Assessment may be opened to obtain information that informs or 
facilitates the FBI’s intelligence analysis and planning Junctions. The authorized purpose and 
dearly defined object! vet s) of a Type 4 Assessment must be based on. or related to. the need 
to collect or acquire information for current or future intelligence analysis and planning 
purposes. An Assessment under this section, oftentimes referred to as a “domain 
Assessment." may lead to the identification of intelligence gaps, the development of FBI 
collection requirements, or the opening of new- Assessments or Predicated Investigations. 

(U//FQUO) A Type 4 Assessment is not threat specific; threat-based Assessments are opened 
and governed by DIOG Section 5.6,3. 2 (Type 3 Assessment). While no particular factual 
predication is required for a Type 4 Assessment, the Assessment cannot be based solely on 
the exercise of First Amendment protected activities or on rate, ethnicity* national origin or 
religion, or a combination of only such factors 

(U//FQUO) Whenever a Type 4 Assessment identifies and begins to focus on specific 
individual(s)* group! sL or organ izatiunfsh whose activities may constitute a violation or 
Federal criminal law or a threat to the national security, a separate Type 1 & 2 Assessment or 
a Predicated Investigation must be opened. Similarly* if a Type 4 Assessment identifies a 
particular national security or criminal threat within tire A OR. or identifies victims or targets 
within an AGR who are vulnerable to any actual or potential threat, a separate Type 3 
Assessment or Predicated Investigation must be opened. 

(U//FGUO) A Type 4 Assessment may not be used for the purpose of collecting positive 
foreign intelligence (PFI), although such intelligence may be incidentally collected. Positive 
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Foreign intelligence can only be intentionally collected pursuant to DIOG Sections 5,6, 3. 5 
(Type 6 Assessment) and/or Section 9. 

(U//FOUQ) See Section 5.1 \ below for intelligence collection, (Le., incidental collection) and 
documentation requirements, All incidental collection must be documented in the St 51 field 
office file, 

56.3.3. 1 (U) Duration 

(U //FQLO) A Type 4 Assessment may only be opened with prior supervisor approval. The 
effective date of the Assessment is the date the final approval authority approves the EC as 
specified in Section 5.6.2 above. A Type 4 Assessment may continue for as long as necessary 
to achieve its authorised purpose and clearly defined objectives). Although a Type 4 
Assessment is not limited in duration, when the clearly defined object! vc(s) have been met 
the Assessment must be closed with an EC approved by the supervisor, 

563.3.2 { V) Document a twn 

(U//FOUO) The title/caption of the opening EC must contain the word ''Assessment," and the 
synopsis must identify the authorized purpose and the clearly defined object! ve(s) of the 
Assessment. Ef appropriate, the Details section of the EC may provide more details regarding 
the authorized purpose and clearly defined objective's). If additional objectives arise during 
the course of the Assessment, they must he documented with an EC and approved by the 
supervisor. If at the time oflhe opening, oral anytime thereafter, the Assessment involves a 
sensitive investigative matter. Lite title/eaption must contain the words “Assessment” and 
"Sensitive Investigative Matter," 

(U//FOUO) Additionally, if DKXi Section 18 requires documentation of the approval to use 
an authorized investigative method in an Assessment, such requests, as well as all uses of 
those methods, musl be documented by an EC, 

(U//FOUO) This type of Assessment must be documented in the appropriate 8 1 8A through F 
or 8I5H classification file. The DIOG prohibits the use of control files or administrative files 
to document investigative activity, (See DIOG Appendix J) 

5. 63.3.3 (U) Appro val 

(U//FQUO) All Type 4 Assessments must be approved in advance by a Supervisor and opened 
by an EC. Notwithstanding any other provision in the DIOG, a Type 4 Assessment cannot be 
opened based on oral approval The supervisor must approve a Type 4 Assessment in 
accordance with the standards discussed in DIOG Section 5.5. Additional approval 
requirements apply to SIMs, as described below, 

5. 6.33.4 (U) Sensitive INvesTtga tive Ma tters (SIM) 

(U//FOUO) If the Assessment involves a sensitive investigative matter (SlM) t the CDC must 
review and the SAC must approve the Assessment prior to opening. If a SIM arises after the 
opening of a Type 4 Assessment, Assessment activity may continue, but the matter must be 
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documented in an EC reviewed by the CDC and approved by the SAC as soon as practicable, 
but not more than five (5) business days after the SIM arises. The term “sensitive 
investigative matter’' is defined in DIOG Section 5.7 and Section 10. 

5.63.3.5 (U) Notice 

(U'KOUO) There is no requirement to provide notice to FBIHQ or DOJ of opening or closing 

Type 4 Assessments, 

5. 633. 6 (U) File Re view 

(U//FOUO) A Type 4 Assessment requires file reviews in accordance w ith DIOG Section 
3.4,4. 

5. 63 3, 7 (U) Responsible Entity 

(LWFQUO) A Type 4 Assessment may only be opened by the DL field office FIGs or 
Regional Intelligence Groups (RIG). 

5. 633.8 (U) Examples op Type 4 Assessments 

5.63 .3.8. 1 (LI) Exam pl e 1 

(U/FQUO) Scenario ; A field office wishes to acquire the following information/data 
from public records/sources in order to increase hs knowledge of its domain so that it can 
prepare intelligence reports regarding threats: (i) general demographics (e,g., general 
population to include concentrations of racial and ethnic groups); (ii) physical location of 
facilities of interest (e.g,„ hospitals, media outlets, sports arenas, schools, religious 
facilities, manufacturing facilities, etc.); (iii) types and location of critical infrastructure 
facilities (eg., dams, power plants, airports, ports); and (iv) location of military 
installations and defense contractors, After acquiring this information/data, the field 
office may store, analyze, map. and share the information as appropriate. All of the 
informal ion/data can be obtained from public records/sources available to the public, as 
well as the FBI, by methods authorized before opening an Assessment, (See DIOG 
Section 5.1.1) 

(U//FQUG) Response : Because this information may be obtained from public sources by 
methods authorized before opening an Assessment a? described in DIOG Section 5.1,1 , 
the field office is not required to open a Type 4 Assessment- It may do so, however, if it 
wishes. 

5.6J.3JL2 (U) EXAMPLE 2 

(U/FOUO) teenariv : Same facts as in example #1 above except the field office needs 
information about (i j demographics; (ii) criminal activity reports showing the location of 
certain criminal gang activities; and (iii) information solely in the possession of the 
Department of Defense (e.g., the location of defense contractors). 
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(U//FQUQ) ResjMjn.sc : If the information sought from state and local authorities already 
exists and the information about the location of defense contractors is available in a DQP 
database, it is not necessary to open a Type 4 Assessment to obtain it. ( See DIOG Section 
5.1.1 ) A request of a state or local agency for demographic or criminal activity 
information which does not exist at the time of the request (and would, therefore, not be 
considered historical) or a request of DOD for a defense contractor report which had not 
yet been prepared would require the opening of a Type 4 Assessment. 

5* 6.3.3, JU (U) Example 3 

(U/FOUO) Scenario : A field office wishes to collect information about population 
demographics within its domain in order to have a better understanding of the 
composition of the community, the different ethnic groups, religious affiliations, 
community interests and dynamics, businesses, etc. for analysis and planning. 

(U//FQUO) Response : In order to obtain this information tor analysis and planning, the 
Held office FIG must open a Type 4 Assessment to determine the demographics and 
population. The field office may: (j) obtain public information; (ii) search/obtain records 
and information from FBI/DOJ; (iii) searchtobtain records or information from other 
Federal, state, local, tribal or foreign agencies (e g., 1-94 Data, Visa Applications, etc.); 
jiv) interview identified sources, and liaison contacts; and (v) search on-line services and 
resources (i.e., commercial databases to identify businesses, organizations, and 
institutions of interest), 

5.6 J.3.&4 |U) Example 4 

(U/FOUO) Scenario : A field office wishes to gather information pertaining to critical 
national assets, research facilities, universities, places of worship, bridges., dams, historic 
buildings and monuments, government facilities, significant private sector facilities, etc.., 
to map the data, in order to better understand key infrastructure components within its 

AQR 

(U//FOUO) Response : In order to obtain this information for analysis and planning, the 
field office FIG would need to open a Type 4 Assessment because it warn Id require the 
use of investigative methods described in Section 18. The field office FIG may store, 
analyze, map. and share the information as set forth in DIOG Sections 12. 14, and 15. 

5*63.4 (U) Type 5 Assessments 

(U) Type 5 Assessment defined : Seek information to identify potential human sources, 
assess their suitability , credibility, or value of individuals as human sources, 

(U//FOUO) A Type 5 Assessment provides the authority and a mechanism to identify, 
evaluate and recruit a Potential Confidential Human Source (CHS) prior to opening and 
operating them as a CHS in DELTA, A Type 5 Assessment Is not a prerequisite to opening an 
individual as an operational CHS in DELTA if the necessary information for opening has 
been obtained through other methods (c.g.. following arrest, an individual agrees to become as 
CHS). 
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(U//FOUO) A Type 5 Assessment may be opened: 

A) (U//FOUO) on a specific named individual who is a potential CHS; or 

B) (U//FOUO) without a specific named individual s if the goal is to identify individuals with 
placement and access to particular information. 

(UVFOUO) A Type 5 Assessment may not be opened on a subject of a Predicated 
Investigation, A previously opened CHS cannot be opened as a Type 5 Assessment, 

(UjVFOUO)Typc 5 Assessment activities may not be based solely on race, ethnicity, national 
origin, religion, or activities protected by the First Amendment, or a combination of only such 
factors, 

(U//FOUO) There are three phases of a Type 5 Assessment. The phases are: (1) Identification 
Phase, (2) Evaluation Phase, and 13) Recruitment Phase. A Type 5 Assessment opened on a 
specific named individual may only use the Evaluation and Recruitment phases as described 
below. A Type 5 Assessment opened without a specific named individual is limited to the 
Identification Phase only. Once the Identification Phase has succeeded in identifying specific 
individuals who might have appropriate placement and access, the FBI employee must open a 
new- separate Type 5 Assessment on any individual the employee wishes to further evaluate 
and possibly recruit as a CHS. Tie original Type 5 Assessment without a specific named 
individual may remain open in the Identification Phase, if the authorized purpose and clearly 
defined objective! s) still exist. 

S. 6. 3 . 4 . 1 (U) Phases of Type $ Assessments 

5.40.4.1. 1 (UjVFOUO) Identification Phase 

(Tjy/FOUG) This phase may be used by an SA assigned to cither a HU MINT or 
investigative squad or by an I A assigned to the field office or FBI HQ u> identify potential 
CHSs who seem likely to have placement and access to information or intelligence 
related to criminal or national security threats, investigations, or collection requirements 
without naming a specific individual . The goal of this phase is to identify individuals 
with CHS potential, who may then be evaluated and recruited under the Evaluation and 
Recruitment Phases of a Type 5 Assessment. 

(UA'FOUO) This phase is initiated with the approval of a CHS identification plan. The 
plan, which must he based on a thorough review of available intelligence regarding the 
threat, investigation or collection requirement at issue, must specify characteristics of 
individuals likely to have CHS potential, and the investigative methods (e.g., database 
searches, surveillance of specific locations, attendance at specific events) that will be 
used to identify individuals with those characteristics. Selection of characteristics 'search 
criteria must have a logical connection to intelligence or known facts, and may not be 
based merely on conjecture. In addition, selected characteristics may not be based solely 
on race, ethnicity, national origin, religion or activities protected under the First 
Amendment or a combination of only such factors. See DIOG Section 4 for further 
explanation on the permissible use o f race, ethnic identity or activities protected under the 
First Amendment. The investigative methods that may be used to identify individuals 
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with the specified characteristics needed must aiso be based on existing intelligence and 
be reasonably likely to yield individuals w ith the specified characteristics, 

(U//FOUG) Jf necessary, after a CHS identification plan has been approved* and a group 
of individuals who potentially have placement and access to the relevant information 
have been identified* the SA or IA may. with authorization set forth in Section 5 6.3.4.8, 
use additional characteristics- to narrow the group of individuals to those most likely to 
have the desired placement and aceess. 

(U//FOUO) Once an SA or I A has narrowed the field to one or more known persons who 
appear to have potential as CHSs, in order to gather additional information regarding 
background and authenticity or, in order for an S A to undertake efforts to recruit the 
individual, a Type 5 Assessment must be opened on the specific named individual! s) in 
accordance with subsection 5, 6,3 .4X2. below. 

5.6. 3.4. 1 .2 (LI//FOL O) E v ali; ATION PHASE 

(U//FOUG) This phase may be used by an SA assigned to either a HUMINT or 
investigative squad or by an IA assigned to the field office or KBIHQ to evaluate a known 
individual believed to have placement and access so that the individual, if success fully 
recruited, can provide the FBI with information of value. The goal of this phase of a Type 
5 Assessment is to gather information, through the use of the investigative methods set 
forth in Section 8, bekw regarding background, authenticity, and suitability of a 
particular Potential CHS < specific named individual ). An IA who develops information 
during this phase that indicates a Potential CHS is worthy of recruitment should prepare a 
Source Identification Package (SIP) for use by an SA on the appropriate HUMINT or 
investigative squad to recruit the individual. If information developed during this phase 
indicates the individual should not be recruited as a CHS, the Type 5 Assessment must be 
closed. 

5. 6.3.4. 1 J (U//FOUO) Recruitment Prase 

(U//FOUG) This phase may only be used by an SA assigned to a H UMINT or 
investigative squad. The goal of this phase of a Type 5 Assessment is to recruit the 
potential CHS to become an operational CHS, and therefore, the recruitment phase may 
focus only on a specific named individual . Information from a SIP or other 
in formation/ Intel ligcnee available to the SA may be used during the recruitment phase. If 
the recruitment is successful, the Type 5 Assessment must be closed (See Section 
5.6.3 4.9* below) and the; individual opened as a CHS in DELTA. The Type 5 Assessment 
must also be closed if the recruitment is not successful, either because the individual 
declines to become a CHS Ora determination is made not to Continue the recruitment, 

5. 6.3. 4.2 ( U)D ura tion 

(U//FOUO) The effective date of a Type 5 Assessment is (he date the highest level of 
authority required approves the opening EC (or successor form in DELTA). A Type 5 
Assessment may continue for as long as necessary to achieve its authorized purpose and 
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clearly defined objective! s) as set forth in the three phases above or when it is determined that 
the individual named subject cannot or should not be recruited as a CHS. 

5 . 6.3. 4. 3 (V) Documenta tion 

5.6A4 J. I (L//FOLIO) 1 DENT1 nCATION FMASE 

(WFOUO) The title pf the EC (or successor form in DELTA) must read: “Type 5 
Assessment, CHS Identification Plan, 7 ’ and contain the number of the appropriate SO I R 
through 807R or 81 5R file. These sub- files are restricted and consist of numerical 
Classifications corresponding to specific investigative programs. The synopsis must stale 
the authorized purpose and clearly defined objective^). If at the time of the opening, or at 
anytime thereafter, the Assessment involves a sensitive investigative matter, the 
title/' caption must also contain the words “Sensitive Investigative Matter." The Details 
section must outline the operational plan, including the following information: 

A) (U//F0UO) The particular placement and access to information that the FBE is seeking, why 
the FBI is seeking a person with such placement and access, and the file number and [Life of 
the Assessment or Predicated Investigation the Type 5 Assessment will support, 

(U//FOUOJ Lwmnhr The FBI is seeking a CHS with access to the leadership of the local 
chapter of the motorcycle gang "Heaven’s Devils." The field office has a Type 3 Assessment 
open to assess the threat from Heaven's Devils bul has no human source penetration to assist 
thal Assessment, 

B) (U 7FOUO) Chara-cteristics/seareh criteria intended to be used to generate the poo! of 
individuals who might have appropriate placement and access, and the basis for selecting the 
particular charaeicrisiics'search criteria. There musi be an articulated reason <o believe (he 
characterislic&'search criteria will yield individuals likely to have (he desired placement and 
access, and the characteristics,' search criteria may not be based solely on race, ethnicity, 
national origin, religion or activities protected under the First Amendment or a combination uf 
only such factors. 

(U//FOUO) Example : Existing intelligence regarding Heaven’s Devils indicates most 
members are 30 to 55 years old. male, have visible “Heaven's Devils" tattoos, ride Vespa 
motorcycles and. prefer wine bars as gathering places. A significant percentage of members 
have a criminal record, typically For possession of user quanti ties of coni rolled substances. 
Accordingly, die CHS identification plan includes identifying middle-aged males who are 
registered owners of Vespa motorcycles and who have a criminal record. The identification 
plan also includes ascertaining the social gathering places for local members. 

C) (U.7FOUO) The investigative methods (e.g., da (abase searches, website monitoring, 
surveillance of physical locations, attendance at particular events] the 1A or SA anticipates 
using to find individuals and an explanation why these investigative methods are expected lo 
yield persons who are likely to have the needed placement and access. 

(U//FOUO) Example : An I A develops a plan to search and monitor specific social networking 
sites known to be used by Heaven's Devils members as a means of identifying members, 
associates, and conlacls who may have value as CHSs. An SA develops a plan to visit local 
establishments at which Heaven’s Devils’ members are believed to frequent in order to 
observe and interact will) patrons and stall' who may have value as CHSs. or to attend a local 
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motorcycle expo at which Heaven's Devils - members and vendors arc known to palnulizc or 
likely to attend, 

(U//FQUO) If a Type 5 Assessment has already been opened and an I A or S.A wishes to 
utilize additional characteristics/search criteria or investigative methods in Lhe 
Identification Phase that were not documented in the opening EC. the additional 
characteristi cs/search criteria and/or investigative methods must he documented by EC 
(or successor form in DELTA). The title must read: 'Type 5 Assessment; Modification of 
CHS Identification Plan,' - The Details section of the EC must include the additional 
ehiiraclerislies/seareh criteria or investigative methods intended to be used to generate the 
pool of individuals who might have appropriate placement and access. The EC must also 
explain the basis for selecting the additional eharaclerislies/seareh criteria or investigative 
methods. Selected eharacterislies/search criteria or investigative methods may not he 
based solely on race, ethnicity, national origin, religion, or activities protected under the 
First Amendment or a combination of only such factors, 

5.6, 3,4.3,; (U//POUO) Ev ALUAtiONf Recruitment Phases 

(U//FOUQ) A Type 5 Assessment opened to evaluate and/or recruit a specific person as a 
CHS must be opened with an EC (or successor form in DELTA) using the appropriate 
80I R-807R or 815R file. The &QIR-807R or S15R files are restricted files consisting of 
numerical classifications corresponding to specific investigative programs The 
titk/caption of the EC must contain the name of the potential CHS and the words ‘Type 5 
Assessment," The synopsis must state the authorized purpose and clearly defined 
object tvefs), The Details section of the EC must provide the facts that indicate the 
individual has placement and access to information or intelligence related to criminal or 
national security threats, investigations, or collection requirements, to include the 
following; 

A) (U//FOUG) The file classification of the Assessment or Predicated Investigation the potential 
CHS may be able to support; 

B) (U//FOUO) The Potential CHS's date of birth and other available biographical data; and 

C> (U//FOUO) The information to which the person is believed to have placement and access and 
w r hy such a CHS- would be of value to the FBI. 

5. 6.3, 4,4 (U) A PPROVAL 

(U//FOUO) A Type 5 Assessment must be approved by the appropriate supervisor and opened 
w ith an EC (or successor form in DELTA ). Notwithstanding any other provision in the DIOG, 
a Type 5 Assessment cannot be opened on oral approval. For SAs, a Type 5 Assessment must 
be approved by their SSA. For LAs, a Type 5 Assessment must be approved by the SIA and 
the SSA on the 1 IUMINT or investigative squad that will potentially recruit the individual. An 
SSA and/or SIA must use the standards provided in DIOG Section 5.5 when deciding whether 
to approve a Type 5 Assessment. Additional approval requirements apply to Sensitive 
Potential CHSs T as described below. 
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B.63.4A. I (XJ//FOUO) Sensitive POTENTIAL CHSs aivd Groups 

(U//FQUO) CDC review and SAC approval h required before a Type 5 Assessment may 
be opened on a Sensitive Potential CHS or if, during the Identification Phase, a sensitive 
characteristic is at least one aspect being used to identify individuals with potential 
placement and access to information of interest. If it is determined after opening a Type 5 
Assessment that a Potential CHS is Sensitive or that a sensitive characteristic must be 
added to the Potential CHS Identification Plan, the Assessment activity may continue, but 
the matter must be documented in an EC (or a successor form in DELTA) and reviewed 
by the CDC and approved by the SAC as soon as practicable, but not more than 5 
business days of this determination, A Sensitive Potential CHS or sensitive characteristic 
(as pan of an Identification Plan) is defined as follows: 

A) (U//FOUO) A domestic public official (other than a member of ihe U.S, Congress or White 
f louse Staff - Which requires higher approval authority, see CHSPG for additional details); 

B) (UjTFOUQ) A domestic political candidate; 

C) (U//FOUO) An individual prominent within a religious organization: 

D) (U//FOUO) An individual prominent within a domestic political organization: 

E) (U//FOUO) A member of the news media; or 

F) (U//FOUO) A member of the faculty or the administration of a college or university in the 
United States, 

(U//FOUO) DIOG Section 10 should be consulted for a definition of these lorms- 

(U//FOUO) For additional information regarding Sensitive Potential CHSs, sec CHSPG, 
Part 2 t & DIOG Section 1 8.3,3 . 

S.6.3A.S (U) Notice 

(U'VFOUO) There is no requirement to provide notice to FBI! IQ or DGJ of opening or closing 
Types Assessments. 

S. 6.3. 4. 6 (U) File Review 

tU'/FOUO) A supervisory file review must be conducted every 90 days (60 days for 
probationary employees), fn addition to the requirements of section 3.4.4. 9, the purpose of the 
file review is to determine the following: 

A) (UVFOUO) Whether authorised investigative methods Have been used properly in all phases 
of the Assessment; 

Bl (U//FOUO) Whether, in the Identification Phase, the Assessment has successfully narrowed 
the field to a group of individuals who are likely to have appropriate placemen! and access; 

Cl (U//FQUO) Whether reimbursable expenses incurred by an SA, if any. were reasonable, 
properly authorized, and property documented; 

Di i'U' TOUO) Wheihcr the Potential CHS was tasked to provide information or paid for his/her 
services or expenses (activities which are not permitted prior to opening the person as a CHS); 
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E) (U//FOUQ) Whether there is a reasonable likelihood the Potential CHS can and should be 
recruited nr. if the Assessment is in the Identification Phase, the plan has a reasonable 
likelihood of generating a group of Potential CHSs; and 

F) (U//FOUG) Whether the Type 5 Assessment should continue for an additional 90 days (60 
days for probationary employees). If continuation is justified* SIA/SSA must document the 
rationale for keeping the Type 5 Assessment open. 

5. 6.3. 4. 7 (U) Responsible Entity 

(U//FGUO) A Type 5 Assessment without a specific named individual may be opened by SAs 
on HirMINT squads or lAs assigned the field office FIG or to FBIIIQ. A Type 5 Assessment 
on specific named individual may be opened by SAs on HU MINT or investigative squads, 
and by l As assigned to the field office FIG, investigative squads, or to FBI HQ. 

5. 6.3. 4. 8 (U) Authorized In vestiga tive Methods in Type 5 Assessments 

(U//FQUO) Only the following investigative methods may be used in a Type 5 Assessment, 
whether in the identification, evaluation, or recruitment phase, All of these investigative 
methods may be used by S As. lA"s may only use investigative methods (A) through (E ). 

A) (U//FOUO) Public information; 

B) (U//FOUQ) Records or information FBI and DOJ; 

C) (Lr//FOUOii Records or information - Other Federal, state, local, tribal, or foreign government 
agencies: 

Dl (U//FOUO) On-line services and resources: 

E) (U//FDUO) Information voluntarily provided by governmental or private entities; 

F) (UyVFOUO) Use oFAFID- with certain approvals required (see CH5PG): 

G) (U//FOUO) CHS use and recruitment; 

H) (U//FGUO) Interview or request information from the public or private entities: 
l) (U//FQUO) Physical surveillance (not requiring a court order); 

J) (U//FOUO) Polygraph examinations (see CH5PG); and 

K.) (U//FOUO) Trash Cavers (Searches that do not require a warcant or court order). 

(U//FGUO) Not*: Consent Searches are authorized in Assessments. 5 

(U//FOUO) Some investigative methods used during Assessments that may require higher 
supervisory approval are set forth in DIOG Section IS, 5. 

(U//FOUQ) In addition, as specified in division PGs. there may be agreements (e.g,. 
Memoranda of Understanding, etc.) that require additional coordination and approval prior to 
conducting certain activities. 


5 (U//FQLF0) The DQJ has opined that Consent Searches are authcriued in Assessments, as well as in 
Predicated Investigations. 
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(U//FGUO) If DIOG Section !8 require!; documentation of the request or the approval to use 
an authorized investigative method, the request and approval must he documented with an EC 
(or the successor form in DELTA), 

5.6. 3.4. 9 (U) Closing Types Assessments 

(U//FQUG) A Type 5 Assessment must be dosed with SIA and SSA approval if it was 
opened by an IA; or with SSA approval if it was opened by an SA, when: 

A) (U//FOUO) In a Type 5 Assessment opened without a specific named individual it is 
determined that the characteristics/search criteria used to identify individuals with placement 
and access to needed information have not succeeded in identifying such individuals, or the 
FBI no longer has a need for a CHS with the specified placement and access; 

B) (U//FOUO) The Identification Phase has succeeded in identifying specific named individuals 
who might have appropriate placement and access. If the FBI wishes to further evaluate ami 
possibly recruit any such identified individuals, a separate Type 5 Assessment must be opened 
on that person. The original Type 5 Assessment may remain open in the identification phase iT 
the authorized purpose and dearly defined objective still exist 

C) (U//FOUO) in a Type 5 Assessment opened on a spe cific nam ed individual, it is determined 
that the PotenbaJ CHS is not a suitable candidate for further evaluation and/or recruitment 
efforts; 

D) (U//FOUO) In a Type 5 Assessment opened on a spec i tie named individu al, 5 A recruit men I 
efforts are successful and the potential Cl IS has been opened as a CHS in DELTA; or 

E) (U//FOUO) In a Type 5 Assessment opened on a specific named individual SA efforts to 
recruit the potential CHS have been unsuccessful or it is determined that further recruitment 
efforts are not likely to be successful. 

5. 6.3. 4.10 (U) Exa mples of TYpe 5 Assessments 

5,63.4 ,10.1 (U//FO U O) E xa m pl es of a Type 5 assess m ent open f r» Without a 

Specific Named Imiimdi vi. 


(UVFQUQ) Example A : A field office has a Type 3 Assessment open on the potential 
terrorist threat from country Y, Through the Type 3 Assessment, the office has 
determined that it has no CFISs with placement or access to the sizeable country Y 
emigre population in the AOR An 1A assigned to the FIG has been assigned to identify 
persons with placement and access to potential terrorist sympathizers. 

(U//FOUO) Response A : The I As assignment is to locate potential CHSs within the 
AOR w r ho would be in a position to provide information or intelligence regarding threats 
that might be coming from country Y. A Type 5 Assessment may not be opened solely lo 
locale and identify Country Y’s emigre population within the AOR because such an 
Assessment would be based solely on the group’s national origin. However, existing 
intelligence indicates that the known terrorists from country Y ate male, between the ages 
15-20, have attended or presently attend American universities, travel to country Y 
several times a year and fly Into rural airport Z when they travel to country Y. The 1A 
determines that ihe aforementioned characteristics are likely to yield persons with 


5-27 

UNCLASSIFIED FOR OFFICIAL USE ONLY 


Vflraion Dated; 
October 15. 3015 


UNCLASSIFIED FOR OFFICIAL U5F ONLY 
Domestic Investigations and Operations Guide 


35 


placement and access to information or intelligence related to the Type 3 Assessment. 

The I A opens a Type 5 Assessment without an identified subject titled 'Type 5 
Assessment: CHS Identification Plan.” The EC must set forth the characteristics/search 
criteria selected tor identifying potential CHSs and the basis for selecting those 
characterise cs/scarch criteria. The IA must also specify the investigative methods he/she 
plans to use to identify potential CHSs from this group, such as databases the I A will 
query to find individuals with the identified characteristics, After the results of the 
various queries are correlated, the I A identifies several individuals who may have the 
desired placement and access, The IA must open separate Type 5 Assessment on each of 
these identified individuals in accordance with sub-section 5.6,3, 4,3,1 above, to further 
evaluate their potential as CHSs, 

(U.VFQUO) Example B : A field office has opened a Type 3 Assessment On the recent 
infiltration in the AOR of a new street gang identified through HRs submitted by 
neighboring field offices, A HUMINT 5A is assigned to develop CHSs to provide 
in formal ion regarding the gang's structure, leadership, members, illegal activities, 
communications and recruitment strategies, etc. 

(U/fFOUO) Response B : Existing intelligence reflects that members of this gang have 
been known to wear clothing of specified colors, have identifiable graffiti, and use 
bowling alleys and certain ethnic restaurants as gathering places, Because the SA's 
primary focus is on CHS development, he/she must open a Type 5 Assessment without a 
specific named individual titled “Type 5 Assessment: CHS Identification Plan." The EC 
sets forth these identifiable characteristics and the investigative methods the SA plans to 
use, the basis for their selection and the locations where he/she plans to interact with such 
individuals. Through the use of authorized investigative methods set forth in subsection 
5.6, 3.4 .8 above, the SA identifies one individual whom the SA believes has the desired 
placement and access to gang members and whom the SA believes may, in time, be 
willing to cooperate. The SA opens a Type 5 Assessment on this specific named 
individual in accordance with Section A, above, to more fully evaluate him/her and 
initiate recruitment 

5.6 J.4. 1(1.2 (LftfFOUO) Examples err Type 5 ASSESSMENTS OPENED ON Spec I Lit 
Named potential CHSs 

(U/FOUO) Example A ; A field office identifies an emerging threat suggesting that La 
Cosa Nostra t“LCN") might be moving into its territory, An IA on the FIG opens a Type 
3 Assessment authorizing collection regarding the potential threat posed by LCN to the 
field office AOR. During the Assessment, the l A learns that a specific individual, who 
appears to periodically associate with persons who are suspected of being members or 
associates of LCN, filed for bankruptcy. Intelligence suggests that this person is desperate 
for money, does not appear to be involved with suspected LCN criminal activities, and 
may be willing to cooperate with the government. 

(U//FOUOI Res ponse A : A Type 5 Assessment may be opened on the specific named 
individual to evaluate his/her potential to become a CHS. Because this Assessment is 
being opened by an IA on the FIG, it must be approved by the lA’s SJA and an SSA on 
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jtiffiSOTfo Response B : Information developed during the Predicated Investigation may 
Vnv'estigiiVinfi or ^potential CHS, If (he engineer is determined to he a subject of the Full 
Investigation, a Type 5 Assessment may not be opened and the engineer needs to be 
opened as the target of a Full Investigation, If the primary focus of the FBI's interest is to 
determine whether the individual may be a potential source, a Type 5 Assessment should 
be opened to collect information necessary to determine whether the FBI should attempt 
to recruit the engineer as a CHS. 

L FOUG) if the Assessment r> opened bv an SA : The S A may open a T ype 5 Assessment 
a his her SSA approval. If the recruitment is successful, the Type 5 Assessment must be 
i when the CHS is opened in DELTA, If (he recruitment ls unsuccessful, the Type 5 
nr must be dosed. 

- O i !/ rhe Assessment is opened hv an I A : The I A must obtain the approval of his/her 
: the supervisor of (be relevant investigative or HUMINT squad to open a Type 5 
m. (Note; An IA may not open an individual as a CHS in DELTA,} If the 
‘Assessment determines the person has placement and access to information or intelligence 
that would be of value, the Type 5 Assessment must be transferred to the appropriate 
investigative squad or the HUMINT squad to further evaluate and recruit the potential CHS, 

5.6.3 .5 (II) Type 6 Assessments 

(U LLvpefr Assessment defined : Seek in for mat in n. proactively or in response to 
investigative leads, relating to matters of foreign intelligence interest responsive to 
To reign inteHigetice requirements. 

(U//FOUO) A Type 6 Assessment is designed to allow the FBI to determine whether the 
circumstances within a field office’s territory would enable the office to conduct a Full 
Investigation to collect information responsive to a Positive Foreign Intelligence (PFI) 
requirement. PFI requirements are described in D1GG Section 9. 1, A Type 6 Assessment 
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the appropriate investigative or HUM INI squad, (If the Assessment were opened by an 
SA on an investigative squad, then his/her SSA would be the sole approving authority.) Jf 
the I A determines during the identification phase that the person has placement and 
access that would be of value, the Type 5 Assessment must be transferred to the 
appropriate HUM [NT or investigative squad to further evaluate and recruit the potential 
CHS. If the recruitment is successful the Type 5 Assessment itiusL be dosed when the 
CHS is opened in DELTA. If the recruitment is unsuccessful, the Assessment must he 
closed. 

(U/FOUO) Exumple B ; A field office has a Full Investigation open on a group of 
individuals from country X believed to be targeting engineers and high-tech workers 
involved in the production of semiconductor chips. Evidence in the Full investigation 
suggests that the individuals from country X are attempting to recruit the engineers and 
high lech workers to steal information regarding the semiconductor chips in exchange tor 
money. During the investigation, an engineer who travels frequently to country X has 
been identified. 

(U//FOUO) Response B Information developed during the Predicated Investigation may 
be used to determine whether the engineer should be viewed as a subject of the 
investigation or a potential CHS. If the engineer is determined to be a subject of the Full 
Investigation* a T ype 5 Assessment may not be opened and the engineer needs to be 
opened as the target of a Full Investigation. If the primary focus of the FBI’s interest is to 
determine whether the individual may be a potential source, a Type 5 Assessment should 
be opened to collect information necessary to determine whether the FBI should attempt 
to recruit the engineer as a CHS. 

(U'/FOUt.)} Ff the Assessment is opened fry an SA : The SA may open a Type 5 Assessment 
with his/her SSA approval If the recruitment is successful the Type 5 Assessment must be 
closed when the CHS is opened in DELTA. If the recruitment is unsuccessful, the Type 5 
Assessment must be dosed. 

(U7/FOUQ) if the Assessment is opened bv an (A : The I A must obtain the approval of his/her 
SIA and the supervisor of the relevant investigative or HUM1NT squad to open a Type 5 
Assessment, (Note; An IA may not open an individual as a CHS in DELTA,) If the 
Assessment determines the person has placement and access to information or intelligence 
that would be of value, the Type 5 Assessment must be transferred to the appropriate 
investigative squad or the HUMINT squad to further evaluate and recruit the potential CHS, 

5.6.3, 5 (IT) Type 6 Assessm ents 

\ L ) Type 6 Assessment defined : Seek in format inn* proactively or in response to 
investigative leads, relating to matters of foreign intelligence I uteres I responsive to 
foreign intelligence requirements. 

lU FOUO) A Type 6 Assessment is designed to allow the FBI to determine whether the 
circumstances vmhin a field office’s territory would enable the office to conduct a Full 
Investigation to collect information responsive to a Positive Foreign Intelligence (PFl) 
requirement. PFl requirements are described in DIOG Section 9.1. A Type 6 Assessment 
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focuses on a field office's capability to collect on those PFI requirements. While no particular 
factual predication is required, the basis of the Assessment cannot be arbitrary or groundless 
speculation* nor can the Assessment be based solely on the exercise of First Amendment 
protected activities or on race, ethnicity, national origin or religion, or a combination of only 
those factors. 

(U//FOUO) Foreign Intelligence is "information relating to the capabilities, intentions, or 
activities of foreign governments or elements thereof foreign organizations, or foreign 
persons," The FBI defines a PFI requirement as a collection requirement issued by the USIC 
and is accepted by the FBI Dl that seeks to collect information outside the FBLs core national 
security mission. 

(U//FOUO) FBI employees must prioritize collection in response to FBI national collection 
requirements before attempting to collect- against a positive foreign intelligence collection 
requirement. The IPG furnishes guidance on the prioritization of collection. 

(U/FOUO) See Section 5.1 1 below tor intelligence collection, (t.e., incidental collection) and 
documentation requirements, All incidental collection must be documented in the 8151 field 
office file. 

5k 6,3, 5, 1 (U) Dura tion 

(U/FOUO) There arc no lime limitations on the duration of a Type ft Assessment. The 
effective date of the Assessment is the date on which the DI Domain Collection and 
HL’MINT Management Section (DCHM5), Domain Collection Program Management Unit 
(DCPMUb UC approves the EC. See DIOG section 5.6.2 above, A Type 6 Assessment may 
continue for as long as necessary to achieve its authorized purpose and clearly defined 
objectives). Although a Type 6 Assessment is not limited in duration, when the authorized 
purpose and clearly defined object ive( s | have been met* the Assessment must be closed or 
converted to a Full Investigation with an EC approved by the field office SSA or SIA and the 
DCPMU UC. When closing a Type 6 Assessment that is designated as a SIM, the SAC and 
the DC I IMS SC must approve the dosing EC. 

5. 6.3. 5. 2 (it) Documehta tiqh 

(U//FOUO) A Type 6 Assessment must be opened by EC. using the appropriate 809-8 1 4 or 
83ft file classification. The title/caption of the opening EC must contain the word 
"Assessment.” and the synopsis must identify the authorized purpose and the dearly defined 
object i vets) of the Assessment. The authorized purpose and clearly defined objectives) 
should be described in more detail in the Details section of the EC. If additional objectives 
arise during the course of the Assessment, they must also be documented in an EC and 
approved by the field office SSA or SIA. If at the time of the opening, or at anytime 
thereafter, the Assessment involves a SIM, the title/caption must contain or be changed to also 
include the words "Assessment" and “Sensitive Investigative Matter." 

(U//FOUO) The DIOG prohibits the use of control files or administrative files to document 
investigative activity, (See DIOG Appendix J) 
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S.6.3.5.3 (U) Approval 

(U//FOUO) AM Type 6 Assessments must be opened by EC and approved in advance by an 
SSA or 51 A and the appropriate D! UC. A Type 6 Assessment must be approved in 
accordance with the standards provided in DIOG Section 5.5, Notwithstanding any other 
provision in the DIOG, a Type ft Assessment cannot be opened on oral approval, 

5.63.5. 4 (U) Sensitive Investiga tive Ma tters (SIM) 

(U//FOUO) If a Type 6 Assessment involves a sensitive investigative matter, the CDC/OGC 
must review and the SAC and the appropriate PI 5C must approve the Assessment prior to 
opening. If a sensitive investigative matter arises after the opening of a Type 6 Assessment, 
Assessment activity may continue, but the matter must be reviewed by the CDC and approved 
by the SAC and the DCHMS SC, as soon as practicable, but not more than five (5) business 
days after the sensitive investigative matter arises. The term “sensitive investigative matter" is 
defined in DIOG Section 5.7 and Section 10. 

S , fi . 3 . 5,5 (V) Notice 

(U//FOUO) FBI HQ authority, as specified above, is required to open a Type 6 Assessment; 
the opening EC will serve as notice to the DL There is no requirement to provide notice to 
DQJ of opening or dosing a Type ft Assessment. 

5. 6.3. 5. 6 (U) File Review 

(U//FQUQ) A Type 6 Assessment requires file reviews in accordance with DIOG Section 
3.4,4. 

S. 6.3.5, 7 (U) Responsible Entity 

(UWQUQ) A Type ft Assessment may only be opened and conducted by the FIG and the [>1 
(Refer to IPG for ferther details). Under the management of the FIG, field office investigative 
squads or FBIHQ divisions may support the collection of information in a Type ft 
Assessment. 

5. 6. 3 , 5.8 (U) Examples/Scenarios of Type 6 assessments 

5. 6.3.5.8J (U) Example 1 

(U/FQUO) Example. I ; A field office teams that the exiled leader of the opposition party 
from a country on the Threat Country List (TCL) is living in the area. The FB1-DI has 
accepted a USIC collection requirement seeking information about the opposition group's 
level of influence in the government-controlled oil industry and published it to the FBI as 
a PFI collection requirement. The FBI’s core national security mission does not include 
domestic politics or infrastructure of the TCL country; however, the Held office believes 
it may be uniquely positioned to collect intelligence on this PFI collection requirement. 
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(U//FQUO) Response : The lie Id office may request the DCPMU to authorize a Type 6 
Assessment to proceed with initial activity that will determine whether the field office 
can, in fact, collect against the published PFI collection requirement. The Type 6 
Assessment will allow the field office to use the appropriate investigative methods to 
determine its collection capabilities related to the PFI collection requirement. If the field 
office determines that it can collect the foreign intelligence, it should contact the DCPMU 
for authorization to open a Full PFI Investigation, { Refer to DIOG section 9 and IPG for 
further details.) 

!M&y (U) Example 2 

(U/FOUO) Example 2 : A field office identifies a series of requirements in a National 
HUM TNT Collection Directive (NHCD) related to a designated international terrorist 
group known to conduct attacks against ITS. interests. The Reid office believes that there 
may be a collection opportunity in its territory and requests the DCPMU to authorize a 
Type 6 Assessment to permit the field office to evaluate its ability to respond to this 
NHCD. 

(U//FQUO) Response : A request to open this Type 6 Assessment would not be approved 
by the DCPMU. A Type 6 Assessment cannot be opened on the ability to collect 
intelligence on NHCDs unless those NHCDs have been “accepted’ 4 and published by the 
FBI Di as PFI collection requirements. In addition, these NHCDs would not be 
“accepted" by the FBI-DI because the neutralization and investigation of terrorist entities, 
particularly in the U.S., is part of the FBI's core national security mission, and would not 
meet the definition of PFI collection requirements. If the field office believes that there 
may be collection opportunities related to a terrorist group, il should consider opening a 
Type 3 Assessment to determine whether the group poses a threat in the field office's 
AOR. 

5.7 (U) Sensitive Investigative Matters [SIM] in Assessments 

(U//FOUO) The litle/caption of the opening or subsequent EC for an Assessment involving a 
SIM must contain the words “Assessment” and "Sensitive Investigative Mailer." DIOG Section 
3 0 contains the required approval authority and factors for consideration when determining 
whether to open or approve an Assessment involving a SIM 

5. 7. 1 (U) SIM Ca tegories in Assessments 

(U//FOUQ) A SIM is an investigative matter involving she activities of a domestic public official 
or domestic political candidate (involving corruption or a threat to the national security L 
religious or domestic political organization or individual prominent in such an organization, or 
news media, an academic nexus, or any other matter which, in the judgment of the official 
authorizing an Assessment, should be brought to the attention of FBI I IQ and other DOJ officials. 
(AGG-Dom. Part VI1.N.) As a matter of FBI policy, “judgment" means that the decision of the 
authorizing official is discretionary. DIOG Section 10 and the DIOG classified Appendix G 
define domestic public official, domestic political candidate, religious or domestic political 
organization, or individual prominent in such an organization, news media, and academic nexus. 
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(U//FGUG) If at the time of the opening, or at anytime thereafter, an Assessment involves a SIM. 
the title/caption must contain the words “ Assessment’" and "Sensitive Investigative Matter/' 

5, 7. 2 (U)Aca DEMtc Nexus in A ssessments 

(U//FOUO) As a matter of FBI policy, an investigative activity having an “academic nexus" is 
considered a SIM if: 

At (U//FGUO) the investigative activity involves matters related to the responsibilities of an 
administfitlur or fatuity member employed by any college or university that is located inside 
the Uni Led States, provided the matter under Assessment is totaled to the individual's position 
at the institution: or 

01 (U'/FOUQ) (he mailer involves any studenl es&ocialion recognized and approved by the 
college or university at which she student association at issue is located, and the college or 
university is located inside the United Stales. 

(U//FOUO) The sensitivity related to an academic institution arises from (he American tradition 
of ‘academic freedom" [e.g,, an atmosphere in which students and faculty are free to express 
unorthodox ideas and views and to challenge conventional thought without fear of repercussion). 
Academic freedom does not mean, however, that academic institutions are off limits to FBI 
investigatory in pursuit of information or individuals of legitimate investigative interest. 

(U//FOUO) For matters not considered a SIM even though there is an academic nexus, see the 
classified provisions in DiQG Appendix ( i. 

5,8 (U) Standards for Opening or Approving the Use of an Authorized 

Investigative M ethod 

(U.'.'FOUQ) Prior to opening or approving the use of an authorized investigative method, an FBJ 
employee or approving official must determine whether: 

A) (U//FOUO) The use of the particular investigative method is likely to further the authorized 
purpose and dearly defined objecttve(s)of the Assessment; 

B) (IJ//FOUO) The investigative method selected is the least intrusive method reasonable based 
upon the circumstances of the investigation: 

C) fU/.'FOUO) The anticipated value of the Assessment justifies the use of the selected 
investigative method or methods; 

D) (IJ//FOIJO) IF Lite purpose of the Assessment is to collect positive foreign intelligence, the 
investigative method complies with the AGG~Dom requirement that die FBI operate openly 
and ecnsensually with an USPER, to the extern practicable: and 

Fji UJ//FOUO) t he investigative method is an appropriate use of personnel and financial 
resources. 
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5.9 (U) Authorized Investigative Methods in Assessments 

5. 9. 1 (V) Type I through 4 and Type 6 Assessments 

(U//FOUD) A compete discussion of these investigative methods, including approval 
requirements, is contained in DlOG Section IS. The use or dissemination of information 
obtained by the use of the be low-methods must comply w ith the AGG-Dom and DlOG Section 
I4 r Oniy the following investigative methods are authorized in Type ] through 4 and Type b 
Assessments: 

A) (U) Public information. (Section 18.5-P 

B) (U) Records or information - FBI and DGJ. (Section IS. 5,2 ) 

C> (U) Records or information - Other federal, stale, local, tribal, or foreign government agency. 
(Section 18 5.3 1 

D) (LTJ On-line services and resources. (Section I 8-5.4) 

E) (U) CHS use and recruitment. (Seetion 18.5,5 ) 

F) (U) Interview or request information from the public or private entities. (Section IS. 5.61 

G) (U) Information voluntarily provided by governmental or private entities. (Section. 18,5.7! 

H j (U) Physical Surveillance (not requiring a court order). {Section 18.5.8 1 

I ) (U) Grand jury subpoenas - for telephone or electronic mail subscriber information only (only 
available In a Type I & 2 Assessment). (Section 1 8.5,91 

(U//FOUO) Note: Consent Searches are authorized in Assessments, 

5. 9.2 (U) Type 5 Assessments 

(U//FGUO) In addition to those investigative methods listed above in 5,9 r I ( A) (H), Type 5 
Assessments only may also use the following investigative methods: 

A) (U) Use of AFID with certain approvals required. (See CHSPG I 

B) (U) Polygraph Examinations (Sec CHSPG ) 

C) (U) Trash Covers (Searches that do nul require a warrant or court order}. (Sec Section 18.6 , 12) 

5.10 [U] Other Investigative Methods Not Authorized During Assessments 

(LW FOLIO) Additional investigative methods, which arc authorized for Predicated 
Investigations, may not be used in Assessments, 

5 J 1 [U] Intelligence Collection (j.e., Incidental Collection) 

(U//FOUO) Intelligence that is responsive to PF1 requirements, FBI national collection 
requirements, and FBI field office collection requirements may be collected incidental to an 
Assessment Or Predicated Investigation. When information that is responsive to these 
requirements is inciden tally collected in an Assessment or Predicated Investigation, it should be 
forwarded to the Field Intelligence Group (FIG) for evaluation and potential dissemination 


Version Dated. 
October U5. 201 1 


5-34 

UNCLASSIFIED - FOR OFFICIAL LiSL ONLY 



UNCLASSIFIED FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide §5 

against collection requirements, {See DIOG Section 15.6.1 .2 - Written Intelligence Products! All 
incidental collection must be documented in the 8151 field office file, 

(U'/FOUO) Prior to submitting to the FIG any information that may be evidentiary and therefore 
potentially discoverable, the FBI employee should discuss with the CDC or OGG the potential 
impact disseminating the information in an intelligence product may have on the prosecution of 
the investigation. To the extent dissemination might or is likely to have an adverse impact on the 
prosecution, the FBI, in consultation with the prosecuting attorney, must assess whether the need 
for dissemination outweighs the probable impact the dissemination may have on the prosecution. 

5,1 2 [U] Retention And Dissemination of Privacy Act Records 

(LVFOUO) The Privacy Act restricts the maintenance of records relating to the exercise of First 
Amendment rights by individuals who are USPERs. Such records may be maintained if the 
information is pertinent to and within the scope of authorized law enforcement activities or for 
which there is otherwise statutory authority for the purposes of the Privacy Act {5 U,S,C. § 
522a[e][7]). Activities authorized by the AGG-Dom are authorized law enforcement activities. 
Thus, information concerning the exercise of First Amendment rights by USPERs may be 
retained if it is pertinent to or relevant to the FBI's law enforcement or national security activity. 
Relevancy must be determined by the circumstances. If the information is not relevant to the law 
enforcement activity being conducted, then it may not be retained. For more information see 
DIOG Section 4.1. (AGG-Dom, Part I.C.S) 

(U) The Privacy Act, however, may not exempt from disclosure information gathered by the FBI 
during Positive Foreign Intelligence Assessments {Type 6 Assessments) and investigations of 
qualified U„5. citizens or lawfully admitted permanent residents if personally identifying 
information about such persons resides in those files, FBI employees should therefore be 
particularly vigilant about properly classifying any such information and should avoid 
unnecessary references to. and the documentation of, identifying information about U S. citizens 
and lawfully admitted perm an cm residents in Positive Foreign Intelligence files. See DIOG 
Section 4.1.3. 

(U FQUO) Even if information obtained during an Assessment does not warrant opening a 
Predicated Investigation, the FBI may retain personally identifying information for criminal and 
national security purposes. In this context, the information may eventually serve a variety of 
v alid analytic purposes as pieces of the overall criminal or Intelligence picture are developed to 
detect and disrupt criminal and terrorist activities. In addition, such information may assist FBI 
personnel in responding to questions that may subsequently arise as to the nature and extent of 
the Assessment and its results, whether positive or negative. Furthermore, retention of such 
information about an individual collected in the course of an Assessment will alert other 
divisions or field offices considering conducting an Assessment on the same individual that the 
particular individual is not a criminal or national security threat. As such, retaining personally 
Jenti tying information collected in the course of an Assessment will also serve to conserve 
resources and prevent the initiation of unnecessary Assessments and other investigative 
activities. 
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5.12.1 (U) Ma ruing Closed Assessments Tha t Corn a in Personal Informa tion 

(U) Information obtained daring an Assessment that has insufficient value to justify further 
investigative activity may contain personal information. As a result! (i) when records retained in 
an Assessment specifically identify an individual or group whose possible involvement in 
criminal or national security-threatening activity was checked out through the Assessment; and 
(iijthfi Assessment turns up no sufficient basis to justify" further investigation of the individual or 
group, then the records must be dearly annotated as follows: 

(U) "It is noted that the individual or group identified during the Assessment does 
not warrant further FBI investigation at this time. Any dissemination of information 
from this Assessment regarding the individual or group identified must include an 
appropriate caveat with the shared information. It is recommended that this 

Assessment be closed. H 

(U) Extreme care should be taken when disseminating personally identifiable information 
collected during an Assessment that does not lead eo sufficient facts to open a Predicated 
Investigation, If personal information from the Assessment is disseminated outside the FBI 
according to authorized dissemination guidelines and procedures, it must be accompanied by the 
required annotation that the Assessment involving this individual or group did not warrant 
further investigation by the FBI at the time the Assessment was dosed. 

5.12.1. 1 (U) Type 1& 2 Assessments 

(Uy/FOUO) When closing Type 1 & 2 Assessments and uploading to a zero classification file, 
the above statement will be automatically annotated to the FD-73 or Guardian record. 

5.12.1.2 [U) Type 3, 4, an p 6 Assessments 

(U//FOUO) When closing Types 3, 4, and 6 Assessments, the Language in 5,12,1 above must be 
included in the synopsis section of the dosing EC. Moreover, any FBI employee who shares 
information from such a dosed Assessment file must ensure the following caveat is included in 
the dissemination: 

(U) “This person [or groupl was identified during an Assessment but nu information 
was developed at that time that w arranted further investigation of the person |or 
groupie 


5 ;12*1 .3 (II) Type 5 Assessments 

(U//FOUO) When closing Type 5 Assessments, the language in 5.12.1 above must be included in 
the synopsis section of the closing EC. Moreover, any FBI employee who shares information 
from such a closed Assessment file must ensure the following caveat is included in the 
dissemination: 

(U) “This person jor group] was identified during an Assessment to identify 
potential human sources hut the person |or gruup| did nut warrant further 
development as a source at that time,' 1 
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5*13 { U ) Assessment File Records Management and Retention 

(U//FGUO) Type I & 2 Assessments must be maintained in an applicable zero sub-assessment 
file (e g., 9 3-0- ASSESSED, 1 5^0- ASSESS) or unaddressed work file. Zero sub-assessment files 
exist for all investigative classifications and must be used to store all information acquired during 
these Assessments. Assessments may not be placed in control files or administrative files. When 
completing the FD-71 or Guardian lead for an Assessment involving a sensitive investigative 
matter* the FBI employee must select the option "‘Sensitive Investigative Matter." Action leads 
can be set when using a zero sub-assessment file in situations where a prompt cheeking of 
information requires action in another division or field office to determine whether a Predicated 
Investigation is warranted. Records must be retained according to National Archives and 
Records Administration (NARA) approved disposition authorities. 

(U//FOUQ) Guardian will be used for documenting only those Assessments described in Section 
5. 6.3.1 regarding international terrorism, domestic terrorism, weapons of mass destruction 
terrorism, and cyber terrorism. Guardian provides the ability to set action leads. The retention of 
records in Guardian, or any successor information technology system, must be retained 
according to NARA-approvcd disposition authorities. Consult the KMD Help Desk for 
assistance. 

(L.VFOUQ) Type 3. 4, 5, and 6 Assessments must have an. opening EC, The titl&'caption of the 
opening EC must contain the word '"Assessment and the synopsis must identify the authorized 
purpose and the clearly defined objective(s) of the Assessment, Assessments may not be placed 
in control files or administrative files. If at the time of the opening, or at anytime thereafter, the 
Assessment involves a sensitive investigative matter, the Li tle/caption must also contain the 
words M Assessment” and "Sensitive Investigative Matter.” When the authorized purpose and 
objectives) have been met, a dosing EC must be approved by the SSA or SI A and uploaded lo 
the file. If additional objectives arise during the Assessment, they must be documented in an EC. 
approved by the SSA or SIA. and uploaded to the file. Assessment classification files must be 
retained according toNARA-approved disposition authorities. 

5.14 (U] Other Program Specific Investigation RtgumEiviENTS 

( L FOUO) To facilitate compliance within an existing investigative program, the FBI employee 
should consult the relevant division’s PG, FBI HQ division PGs, how- ever, may not contradict, 
alter or otherwise modify the standards established in the DIOG, 
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6 (U) PRELIMINARY INVESTIGATIONS 


6.1 [U] Overview 

(U) The ACrG-Dom authorizes a second level of investigative activity — Predicated 
Investigations. Predicated Investigations that concern federal crimes or threats to the national 
security are subdivided into Preliminary Investigations (PI) and Full Investigations (Full). A 
Preliminary Investigation may be opened on the basis of any "a I legal ion or information’ 1 
indicative of possible criminal activity or threats to the national security. 

6.2 [U] Pu rpose a nd Scope 

(U//FOL-0) A Preliminary Investigation may be opened to detect, obtain information about, or 
prevent or protect against federal crimes or threats to the national security. However, a 
Preliminary Investigation cannot be opened or used solely for the purpose of collecting against 
Positive Foreign Intelligence (PFI) requirements, or for conducting an Enterprise Investigation 
(El). 

(U) The purposes for conducting Preliminary Investigation include such matters as: determining 
whether a federal crime has occurred or is occurring, or if planning or preparation for such a 
crime is taking place; identifying, locating, and apprehending the perpetrators: obtaining 
evidence needed for prosecution; or identifying threats to the national security. 

(U) The investigation of threats to the national security may constitute an exercise of the Ftil's 
criminal investigation authority as well as its authority to investigate threats to the national 
security. As with criminal investigations, delecting and solving crimes and arresting and 
prosecuting the perpetrators are likely objectives of investigations relating to threats to the 
national security, These investigations, however, serve important purposes outside the ambit of 
normal criminal investigations, by providing the basis for decisions concerning other measures 
needed to protect the national security, 

6.3 [U) Civil Liberties and Privacy 

iU) The pursuit of legitimate investigative goals without infringing upon the exercise of 
constitutional freedoms is a challenge that the FBI meets through the application of sound 
judgment and discretion. In order to protect civil liberties in the conduct of criminal and national 
security investigations, every Preliminary Investigation under this subsection must have adequate 
predication that is documented in the opening communication. 

iL ! ) No Investigative activity* including Preliminary Investigations, may be taken solely on the 
basis of activities that are protected by the First Amendment or on the race, ethnicity, national 
origin or religion of the subject, or a combination of only those factors. Preliminary 
Investigations of individuals, groups or organizations must focus on activities related to the 
“-‘feats and or crimes being investigated, not solely on First Amendment activities or on the race, 
r'hnicity, national origin or religion of the subject. In this context, it is particularly important 
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clearly to identity and document the law enforcement or national security basis of the 
Preliminary Investigation. 

(U) Example : Individuals Or groups who communicate with each other nr with members of the 
public in any Ibrm in pursuit of social or political causes — such as opposing war of foreign 
policy, protesting government actions, promoting certain religious beliefs, championing 
particular locate national, or international causes, ora change in government through non' 
criminal means, and actively recruit others to join their causes — have a fundamental 
constitutional right to do so. A Preliminary Investigation may not be opened based solely on the 
exercise of these First Amendment rights. 

(U) The AGG-Dom present investigators with a number of authorized investigative methods in 
the conduct of a Preliminary Investigation. Considering the effect on the privacy and civil 
Liberties of individuals and the potential to damage the reputation of individuals, some of these 
investigative methods arc more intrusive than others. The least intrusive method if reasonable 
based upon the circumstances of the investigation is to be used, but tile FBI must not hesitate to 
use any lawful method consistent with the AGG-Dom. A more intrusive method may be 
warranted in light of the seriousness of a criminal or national security threat. 

(U) By emphasizing the use of the least intrusive means to obtain intelligence, information, 
and/or evidence, FBI employees can effectively execute their duties w r hi!e mitigating the 
potential negative impact on the privacy and civil liberties of all people encompassed within the 
investigation, including targets, witnesses, and victims. This principle is not intended to 
discourage FBI employees from seeking relevant and necessary intelligence, information, or 
evidence, but rather is intended to encourage FBI employees to choose the least intrusive — but 
still reasonable based upon the circumstances of the investigation — means from the available 
options to obtain the intelligence, information or evidence. (See DIOG Section 4.4'). 

6.4 (U) Leg a l Auth n rity 

6 . 4 . 1 (U) Criminal In vestiga tiqns 

(U) The FBI has statutory authority to investigate all federal crime not assigned exclusively to 
another federal agency. (See 28 u's.C. § 533; IS U5.C. tj 3052; 28 C.F.R. $ 0.85 [a]) 

(U) The FBI also has special investigative jurisdiction to investigate violations of state law in 
limited circumstances. Specifically, the FBI has jurisdiction to investigate felony killings of slate 
Saw enforcement officers (28 U.S.C § 540), violent crimes against interstate travelers (28 U-S.C- 
§ 540A), and serial killers {28 U.S-C. § 54DB). Authority to investigate these mailers is 
contingent on receiving a request by an appropriate state oHicia]. 

6.4.2 (U) Threa ts to the Na tional Security 

(U) The FBI has authority to investigate threats to the national security pursuant to executive 
orders. Attorney General authorities, and various statutory sources. (See Appendix B: 
Executive Order (EO) 12333; 50 USX, g& 40 J Ct seq.; 50 U.S.C. gg 1801 et seq.) 
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(U) "Threats to the rational security" are specifically defined to mean: international terrorism; 
espionage and other intelligence activities, sabotage, and assassination, conducted by. for. ci- 
on behalf of foreign powers, organisations, or persons: foreign computer intrusion; and other 
matters determined by the Attorney General, consistent with EO 12333 or any successor 
order. (AGG-Dom, Part Vll.S) 

6.5 (U) Predication 

(U) A Preliminary Investigation may be opened on the basis of "information or an allegation" 
indicating the existence of a circumstance described as follows: 

A) (IT) An activity constituting a federal crime or a threat to the national security has or may have 
occurred, is or may be occurring, or will or may occur and the investigation may obtain 
informal ion or intelligence relating to the activity or the involvement or role of an individual, 
group, or organization in such activity, (AGO- Dorn, Part JI.B.3) 

B) (U) An individual, group, organization, entity, information, property, or activity is or may be a 
target of attack, victimization, acquisition, inliUration, or recruitment in connect! on with 
criminal activity in violation of federal law ar a threat to the national security and the 
investigation may obtain information or intelligence that would help to protect against such 
activity or threat, (AGG-Dom, Part LI B,3) 

(U//FOUO) Examples : The following examples have sufficient predication to open a Preliminary 
Investigation: 

A) (U//FOUO) A CHS, with no established history, alleges that an individual is a member of a 
toTori&t group; this “allegation" is sufficient predication to open a Prel iminary investigation; 
and 

B) (U//FOUO) If an analyst, while conducting an assessment, discovers on a blog a threat to a 
specific person, this “information" is enough to open a Preliminary Investigation. 

6.6 [U) Standards for Opening or Approving a Preliminary Investigation 

(U) Before opening or approving the conduct of a Preliminary Investigation, an FBI employee or 
approving official must determine whether: 

A) (U//FOUU) Adequate predication exist lor opening a Preliminary Investigation; 

B) 0J//FOL , G)Thf: Preliminary Investigation is not based solely on the exercise of First 
Amendment activities or or the race, ethnicity, national origin or religion of the subject or a 
combination of only such factors; and 

C) (U//FOUQ) The Preliminary Investigation is an appropriate use of personnel and financial 
resources. 

fU'TOUO) Additional policies regarding Preliminary Investigations involving any foreign 
ambassador, foreign official, foreign student or exchange visitor, protected persons or premises 
is subjects may be found in to DIOG Appendix G Classified Provisions [No Foreign Policy 
Objection], 

1 1 FQUO) A Preliminary Investigation cannot be opened based solely on an FRT collection 
requirement. 
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(U) Opening Documentation, Approval, Effective Date, Notice, 
Extension, Pending Inactive Status, Conversion, and File Review 

6 . 7. 1 (U) Opening Document a raw 

(U//FQUO) The predication to open a Preliminary Investigation must be documented in the 
opening Electronic Communication (EC), The appropriate approving authority may grant ora] 
authority to open a Preliminary Investigation if the standards for opening or approving a 
Preliminary investigation are met. Should oral authorization to conduct a Preliminary 
Investigation be granted, an EC setting forth the predicating facts, as well as the identity ofthe 
authorizing supervisor and date of oral authorization, must be documented to the supervisor who 
granted the oral authorization, as soon as practicable, but not more than five (5} business days 
after granting oral authorization. 

(U//FGUG) If at the time of the opening, or at anytime thereafter, the Preliminary Investigation 
involves a sensitive investigative matter, the tilie/eaplion must contain the words “Sensitive 
Investigative Matter." 

(U//FOUQ) The DlOG prohibits the use of control files or administrative files to document 
investigative activity. (See DIOG Appendix J} 

6.7.1. i ( U] Approval / Effective D atf / N qtice 

(U//FOUG) The effective date of the Preliminary Investigation is the date the final approval 
authority (e.g M Supervisory Special Agent (SSA) or Special Agent- in -Charge [SAC)} 
approves the EC by electronic signature dale generated by Sentinel or by handwriting their 
initials and date on the EC. If the Preliminary Investigation is opened on oral authority, ihc 
date on which the oral authority was granted is the effective date. See DIGG Section 3.4 .2.2- 
Adding another subject after opening the Preliminary Investigation does not change the 
original effective date or the extension date. 

A) {LF//FOUG) O fitted By a tteld Offkr : The opening of a Preliminary Invalidation by ihc 
field office requires prior approval of the SSA. The opening of a Preliminary Investigation 
docs not require FIJI Headquarters (FBlHQ)or Department of Justice (DOJ) notification 
unless the Preliminary Investigation involves a sensitive investigative matter I'S-IM) as 
discussed in paragraph C bdow, FBI I IQ division PGsmay, however, require written 
notification to the appropriate FBIHQ unit and section within 1 5 calendar days following the 
opening of Preliminary Investigations. 

B) ( U/VFQUOt Opened By ttiiHO : The opening of a Preliminary Investigation by FBIHQ 
require? prior approval ofthe Unit Chief (UQ with written notification to any applicable field 
office, within 15 calendar days following the opening. The opening of a Preliminary' 
Investigation does not require DOJ notification unless the Preliminary Investigation involves a 
SIM as discussed in paragraph C below. 

C) (U//FOUG \ Sensitive fmestixafiv? Matter* (SIN) : The opening of a Preliminary 
Investigation involving a SIM: 

I ) (U//FQUG) Si.N Opened by a Field Office : requires prior Chief Division Counsel (CDC) 
review and SAC approval, and written notification {EC and a disseminablc Letterhead 
Memorandum (LHM)). to the appropriate FBIHQ operational UC and Section Chief (SQ 
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within 15 calendar days following the opening. Additionally, the field office must notifv 
the United Stales Attorney's Office (U5AO). in writing, tin less such notification is 
inappropriate under the circumstances (e.g., a public corruption investigation of a person 
who is personally close to the Untied States Attorney (USA)) or the matter is u 
counterintelligence or espionage investigation. (See CD PG for details concerning notice in 
counterintelligence and espionage investigations.) If nolice is not provided to the USAG 
under the exceptions described above, (he field office musl explain those circumstances in 
the written notice to FBIHQ, The responsible FBI HQ section must notify, in writing, the 
appropriate DOJ Criminal Division orNSD official as soon as practicable, but no later than 
50 calendar days after the investigation is opened, The notice must identity- all known 
SIMs involved in ihc investigation (sec DIGG Appendix G - Classified Provisions for 
additional notice requirements). If a SIM arises after the opening of a Preliminary 
Investigation, investigative activity may continue, but the matter must be reviewed by the 
CDC and approved by the SAC as soon as practicable, but not more than five (5) business 
days thereafter to continue the investigation. Notice must be provided as specified above. 

2) (LWFOUO) S7T/ Opened hr FBI HO : requires prior OGC review' and SC approval, and 
written notification (an EC and disseminable Lt EM) to any appropriate field office within 
I 5 calendar days following the opening; (he USAG, unless such notification is 
inappropriate under the circumstances, (e.g., a public corruption investigation of a person 
who is personally close to the USA) or the matter is a counterintelligence or espionage 
investigation; and the appropriate DOJ Criminal Division or NSD official, as soon as 
practicable, but no later than 30 calendar days after the investigation is opened. (Sec CD 
PG (or detail* concerning notice in counterintelligence and espionage investigations,) If 
notice is not provided to the USAO under the circumstances described above, FBIHQ must 
explain those circumstances in the written nufiee to the field office(s) and DOJ. The notice 
must identify all known SIMs involved in the investigation (see DIOG Appendix G - 
Classified Provisions for additional notice requirements). If a SIM arises after the opening 
of a Preliminary Investigation, investigative activity may continue, but the matter must he 
reviewed by OGC and approved by the appropriate FBIHQ operational SC as soon as 
practicable, but not more chan live (5) business days thereafter to continue the 
investigation. Notice must be provided as specified above. 

D) (U//FGUO) f fifffO Dhappron r \ Qpeninj* : The Executive Assistant Director (E AD) for Ihc 
National Security Branch must notify the Deputy Attorney General if FBIHQ disapproves a 
field office’s opening of a Preliminary Investigation relating to a threat to the national securilv 
on the ground that (he predication for the investigation is insufficient, and the FAD for the 
National Security Branch is responsible for establishing a system that will allow for the 
prompt retrieval of such denials, (AGG-Dom, Part II. B. 5. d) 

6,7*2 (U) Extension 

(TJ//FOUO) A Preliminary Investigation must be concluded within six months of its opening but 
may be extended for up to six months by the SAC (delegable to the AS AC) 6 . FBIHQ division 
PCs may require written notification of this six month extension to the appropriate FBIHQ 
operational unit and section. Extensions of Preliminary Investigations beyond a year are 
discouraged and may only be approved by the appropriate FBI I IQ operational section for "good 
cause," (AGG-Dom, Pari fLBAaJi) 


* (U//FOUO) SAC approval required to extend Preliminary Investigations was non -delegable in the previous 
version of the DIOG. That restriction has been removed in this version. 
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fi .7.2.1 {UjGnop Cause 

(U7/FQUO) The following factors must be used to determine whether ‘"good cause" exists to 
extend the Preliminary Investigation beyond one year: 

A) (U/vFQUO) Whether logical investigative steps have yielded information that lends ta 
inculpate or exculpate the subject; 

B) (U//FGIX1) The progress that has been made toward determining whether a Full Investigation 
should be opened or the Preliminary Investigation should be closed; 

C) (TJ//FOUO) Whether, based on the planned course of Investigation for the following six 
months, it is reasonably likely that information will be obtained that will lead to predication 
for a Full Investigation, thereby warranting an extension for another six months, or will lead to 
exculpatory information, thereby warranting closing the Preliminary Investigation; and 

D) (U//FOUO) Whether adequate predication has been developed to justify opening a Full 
Investigation or whether sufficient information has been developed that justifies closing the 
Preliminary Investigation. 

6, 7 . 3 (U) Pending In a ctjve Sta tus 

(U//FOUO) The DIOG does not authorize placing Preliminary Investigations into a "pending 
inactive" status. 

6 > 7, 4 (U) Con version to Full In vestiga tion 

(U7/FGU0) When converting a Preliminary Investigation to a Full Investigation, see DIOG 
See Lion 7 Tor approval and notification requirements, 

6. 7 . 5 (U) File Review 

(U//FOUO) Supervisory file reviews must be conducted at least once every 90 days in 
accordance with DIOG Section 3.4.4. File reviews for probationary FBI employees must be 
conducted at least every 60 days. 

6.8 (U) Standards for Opening or Approving the Use of an Authorized 

Investigative Method in Preliminary Investigations 

(U//FOUG ) Prior to opening or approving the use of an investigative method, an FBI employee 
or approving official must determine whether: 

A) (tMFOUQ) The use of the particular investigative method is likely to further the authorised 
purpose of the Preliminary Investigation; 

B) (U//F0U01 The investigative method selected is the least intrusive method, if reasonable 
based upon the circumstances of the investigation; and 

C) (U/FOUO) The met hod to be used is an ap p r o pri ate use of personnel and financial resources. 
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6.9 (U) Authorized Investigative Methods in Preliminary Investigations 


(U) All lawful methods may be used in a Preliminary Investigation, except for mail opening, 
physical search requiring a Federal Rules of Criminal Procedure {FCRP) Rule 41 search warrant 
or a Foreign Intelligence Surveillance Act (FISA) order, electronic surveillance requiring a 
judicial order or warrant (Title III or FISA), or Title VI I FISA requests. Authorized methods 
include, but arc not limited to, those listed below. Some of the methods listed are subject to 
special restrictions or review or approval requirements. (AGG-Dom, Part V.4.A) 


(U//FOUO) A complete discussion of these investigative methods, Including approval 
requirements, is contained in Section IS. The use or dissemination of information obtained by 
the use of the below methods must comply w r ith the AtiG-Dom and DlGti Section 14, The 
following investigative methods arc authorized to be used in Prelim inary Investigations: 

A) (U) Public information. (See Section 18.5, I) 

B) (U) Records or information - FBI and DOJ. (See Section 18.5.21 

C) (U) Records or information - Other federal, state, local, tribal, or foreign government agency. 
(See Section JM3) 

D) (U) On-line services and resources. (See Section 18.5.4 ) 

EH LI) CHS use and recruitment. (See Section lft.5.3 ) 

F) (U) Interview or request information from the public or private entities. (See Section J 8,5,6} 

G) (U) Information voluntarily provided by governmental or private entities. (Sec Section 18.5.7) 

H) (U) Physical Surveillance (not requiring a court order). (See Section 18,5.8) 

I) (U j Consensual monitoring of communications, including electronic communications.. (See 
Section 1 3,6, 1 ) 

(WFOUO) Note: For those state, local and tribal governments that do not sanction or provide 
a law enforcement exception available lo ihc FBI For one-party consent recording of 
communications with persons within their jurisdiction, the SAC’ must approve the emi.sen.suai 
monitoring of communications as an Otherwise Illegal Activity (GlA). Prior to the SAC 
authorizing ihe-OIA, one-party consent must be acquired. The SAC may delegate theOIA 
approval authority to an Assistant Special Agent-in-Charge (ASAC) or Supervisory Special 
Agent (5SA). 

(U/YFOUO) See the classified provisions in Appendix G for additional information. 

J) Intercepting the communications of a computer trespasser. (See Section 1 8.6,2 ) 

K) (U) Closed-circuit television/video surveillance, direction finders, and other monitoring 
devices. (See Section 18,6.3) 

L) (U) Administrative subpoenas. (See Section 1 8.6.4 ) 

M) (U) Grand jury subpoenas, (See Section 18.6,5) 

\] (U) National Security Letters. (See Section i 8.6.6 ) 

G) (U) FISA Order for business records. (See Section 18.6 J ) 
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P) (U) Stored wire and electronic communications and transactional records* (See Section 

ISM ) 7 

Q) (U) Pen registers and trap/trace devices, {See Section JI B.ftffl 

R) (U) Mail covers. (Sec Section 1 8*6. 1 0 ) 

S) (U) Polygraph examinations, (See Section IjyUI) 

T) (U) Trash Covers ( Searches that do not require a warrant or court order J. (See Section IS.6.12 1 

U) (U) Undercover operations. (See Section 18,6, 1 31 

( U ) See the classified provisions in DKXi Appendix G for additional information* 

6*10 (U) Sensitive Investigative Matters (SIM) in Preliminary 

Investigations 

(U//FOUO) "The title/caption of the opening or subsequent RC for a Prelim inary Investigation 
involving a SIM must contain the words "'Sensitive Investigative Matter.” DKXi Section 10 
contains the required approval authority and factors lor consideration when determining whether 
to conduct or approve a Preliminary Investigation involving a SIM. 

6J0.1 (U) SIM CA TEGORIES IN PRELIMINARY iNVESTIGA TIONS 

(U//FQUO) A SIM is an investigative matter involving the activities of a domestic public official 
or domestic political candidate (involving corruption or a threat to the national security), 
religious or domestic political organization or individual prominent in such an organization* or 
news media, an academic nestis, or any other matter which, in the judgment of the official 
authorizing an investigation* should be brought to the attention of FB1HQ and other DGJ 
officials* (AGG-Dem, Pari VTI.N.'S As a matter of FBI policy, "judgment” means that the 
decision of the authorizing official is discretionary. DIGG Section 10 and/or the DIOG Appendix 
G - Classified Provisions define domestic public official, domestic political candidate* religious 
or domestic political organization or individual prominent in such an organization, news media, 
and academic nexus, 

6.10*2 (U) A ca demic Nexus in Prel imina ry In vestiga tions 

(U//FOUQ) As a matter of FBI policy, an investigative activity having an "academic nexus" is 
considered & SIM if: 

A) (L1//FGUO) J Hrc investigative activity involves matters related to lire responsibilities of an 
administrator or faculty member employed by any college ur university' that is located inside 
the United States, provided the matter being investigated is related to the individual's position 
at the institution; or 

B) (U//FOUOJ The matter involves any student association recognized and approved by the 
college or university at which (he student association at issue is located, and the college or 
university is located inside the United States. 


7 (U//FQUQ} The use of Search Warrants to obtain this Information In Preliminary Investigations is 
prohibited. (See DiOG Section 1 868-423} 
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(U//FOUO) The sensitivity related to an academic institution arises from the American tradition 
of “academic freedom' 1 (c.g., an atmosphere in which students and faculty are free to express 
unorthodox ideas and views and to challenge conventional thought without fear of repercussion ). 
Academic freedom does not mean, however, that academic institutions are off limits to FBI 
investigators in pursuit of information or individuals of legitimate investigative interest. 

(TJ/.TOLO) For matters not considered a SIM ever though there is an academic nexus, see the 
classified provisions in D1QG Appendix G. 

6.1 1 (LQ Intelligence Collection (le, # Incidental Collection) 

(U//FOLQ) Intelligence that is responsive to PFI requirements, FBI national collection 
requirements, and FBI field office collection requirements may be eo Heeled incidental to a 
Predicated Investigation. When information that is responsive to these requirements is 
incidentally collected in a Predicated Investigation, it should be forwarded to the Field 
Intelligence Group (FIG) for evaluation and potential dissemination against collection 
requirements. fSee DIOG Section 1 5 . 6 . 1.2 - Written Intelligence Products) All incidental 
collection must be documented in the 8151 field office file. 

(U//FOUO) Prior to submitting to the FIG any information that may be evidentiary and therefore 
potentially discoverable, the FBI employee should discuss with the CDC or OGC the potential 
impact disseminating the information in an intelligence product may have on the prosecution of 
the investigation. To the extent dissemination might or is likely to have an adverse impact on the 
prosecution, the FBI, in consultation with the prosecuting attorney, must assess whether the need 
for dissemination outweighs the probable impact the dissemination may have on the prosecution. 

6.12 (U) Standards for Approving the Closing of a Preliminary 
Investigation 

6.12.1 (U) Standards 

( U//FOUQ) At the conclusion of a Preliminary Investigation, each of the following items must 
be documented in the closing communication { EC and/or LHM): 

A) (U//FGUO) A summary of the results of the investigation; 

B) (U//FOUO) Whether all logical ami reasonable investigation was completed; 

C) (U//FOUO) Whether all investigative methods/lcchriques initiated have been completed 
and/or discontinued; 

D) { U/.'TOUG) Whether alt leads set have been completed and/or discontinued; 

E) (LJY/FOUO) Whether all evidence lias been returned, destroyed or retained in accordance with 
evidence policy; and 

F) (U//TOUO) A summary statement of the basis on which the Preliminary Investigation will He 
closed, and a selection of the appropriate closing status: 

9 ) (U//FOUO) C-4: Administrative Closing, which includes: 
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a) (LV /FOLIO) No further investigation is warranted because logical investigation and/or 
leads have been exhausted, and the investigation to date did not identify a criminal 
violation or a priority thrcrai to the national security 

b) (U//FOUO) Investigation assigned a new file number 

c) (U//FOUO) Investigation consolidated into a new file number Of an existing file 
number, or 

d) (U//FOUO) Unaddresscd Work investigation File closed because m> investigation or no 
lurthcr investigation will be conducted 

2) (U//FOUO) C~5: USA Declination Closing, which includes: 

a) (U/’TDUD) The USAO declined prosecution individual matter declination 
h) (U//FOUO) The USAO declined prosecution - blanket declination 

3) (LV/FOUO) C-b: Other Closing, which includes: 

a) (U//FOUO) National security investigation has been completed 

b) (U//FOUO) Prosecution became non-viable for national security reasons 

c) (U//FOUG) Any other reason to close 

6.12,2 (U) Approval Requirements to Close 

(U//FOUO) The appropriate closing superv isor described below must review and approve the 
closing communication (as described in Section 6.12,1) to ensure it contains the above required 
information and sufficient details of (he investigation on which to base the decision to close the 
Preliminary Investigation. The dosing supervisor must note on the dosing document "C” the 
dosing number 4, 5 or 6 (e.g,. 04* 05 or 06) and the dosing date, The appropriate closing 
supervisors are: 

A) (U//FOUO) Opened by a Field Office: Closing a Preliminary Investigation opened by a field 
office requires approval from the 3SA. Notification to the FBlHQ operational unit may be 
required by division PGs. 

B) (U//FOUO) Opened by FBI HQ: Closing a Preliminary investigation opened by FBI HQ 
requires approval from the UC and notification to any appropriate field office. 

C) (U//FOUO) SIM Opened by a Field Office: Closing a Preliminary Investigation opened by a 
field office involving a SIM requires approval from the SAC. written notification to the 
FBIHQ opera! ionai unit and section and the USAO, if the USAO was notified of the opening. 

D) (U//FOUO) SIM Opened by Mil I IQ: Closing a Preliminary Investigation opened by FBIHQ 
involving a SIM requires approval from the SC and written notification to any appropriate 
field office. 

6.13 (U) Other Program Specific Investigative Requirfmfnts 

(U//FQUQ} To facilitate compliance with investigative program specifie requirements, the FBI 
employee should consult the relevant division's FG; FBIHQ division PGs, however, may not 
contradict, alter or otherwise modify the standards established in the DIOG, 
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7 (U) FULL INVESTIGATIONS 


7.1 (U) Overview 

(U//FOUO) The AGG-Dom authorises a second level of investigative activity Predicated 
Investigations. Predicated Investigations that concern federal crimes or threats to the national 
security are subdivided into Preliminary Investigations. (PI) and Full Investigations (Full). A Full 
Investigation may be opened if there is an '"articulable factual basis” of possible criminal or 
national threat activity, as discussed in greater detail in Section 7,5, below, There are three types 
of Full Investigations: (i) single and mu it i -subject; (if) Enterprise; and { iii) positive foreign 
intelligence collection. 

7.2 (U) Purpose and Scope 

(U) A Full Investigation may he opened to detect, obtain information about, or prevent or protect 
against federal crimes or ihrcats to the national security or to collect foreign intelligence. 

(U) The purposes for conducting Full Investigations include such matters as: 

A) (U) determining whether a federal crime is being planned, prepared for, occurring or has 
occurred; 

Bj (U) identifying, locating, and apprehending the perpetrators; 

CJ |U) obtaining evidence for prosecution; 

D| (U) identifying threats, to the national security; 

E) (U) investigating an enterprise (as defined in DIOG Section 8); or 

F) (U) collecting positive foreign intelligence (PFI) (as defined in DIOG Section 9). 

i: U) The investigation of threats to the national security can be investigated under the FBI's 
criminal in vestigation authority or its authority to investigate threats to the national security. As 
with criminal investigations, detecting and solving crimes, gathering evidence and arresting and 
prosecuting the perpetrators arc frequently the objectives of investigations relating to threats to 
the national security. These investigations also serve important purposes outside the ambit of 
normal criminal investigations, however, by providing the basis for decisions concerning other 
measures needed to protect the national security. 

(U//TOUO) A Full Investigation solely for the collection of positive foreign intelligence extends 
the Sphere Of the FBI’S information gathering activities beyond federal crimes and threats to the 
national security and permits the FBI to seek information regarding a broader range of matters 
relating to foreign powers, organizations, or persons that may be of interest to the conduct of the 
L ruled States' foreign affairs, (See DIOG Section 9) 

7.3 (U) Civil Liberties and Privacy 

■ I ! The pursuit of legitimate investigative goals w ithout infringing upon the exercise of 
.- institutional freedoms is a challenge that the FBI meets through the application of sound 
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judgment and discretion. In order io protect civil liberties e the conduct of criminal and national 
security investigations, every Full Investigation under this subsection must have adequate 
predication that is documented in the opening communication. 

(U } No investigative activity T including Full Investigations, may be taken solely on the basis of 
activities that are protected by the First Amendment or on the race, ethnicity, national origin or 
religion of the subject, ora combination of only those factors. Full Investigations of individuals, 
groups or organisations must focus on activities related to the threats or crimes being 
investigated* not solely on First Amendment activities or on the race, ethnicity, national origin or 
religion of the subject. In this context, it is particularly important clearly to identify and 
document the law enforcement or national security basis of the Full Investigation. 

(U > Example : individuals or groups who communicate with each other or with members of the 
public in any form in pursuit of social or political causes -such as opposing war or foreign 
policy, protesting government actions* promoting certain religious beliefs, championing 
particular local, national, or international causes, or a change in government through non- 
criminal means, and actively recruit others to join their causes — have a fundamental 
constitutional right to do so. A Full Investigation may not be opened based solely on the exercise 
of these First Amendment rights. 

(U > The AGG'Dom authorize all lawful investigative methods in the conduct of a Full 
Investigation. Considering the effect on the privacy and civil liberties of individuals and the 
potential to damage the reputation of individuals, some of these investigative methods are more 
intrusive than others, The least intrusive method if reasonable based upon the circumstances of 
the investigation is to be used* but the FD1 must not hesitate to use any lawful method consistent 
with the AGG-Dom, A more intrusive method may be warranted in light of the seriousness of a 
criminal or national security threat or the importance of a foreign intelligence requirement, 

IU) By emphasizing the use of the least intrusive means to obtain intelligence or evidence. FBI 
employees can effectively execute their duties while mitigating the potential negative impact on 
the privacy and civil liberties of all people encompassed within the investigation* including 
targets* witnesses, and victims. This principle is not intended to discourage FBI employees from 
seeking relevant and necessary intelligence, information, or evidence, but rather is intended to 
encourage FBI employees to choose the least intrusive — but still reasonable based upon the 
circumstances of the investigation — from the available options to obtain the intelligence, 
information or evidence. I See DIOG Section 4) 

7.4 (U) Legal Authority 

7. 4.1 (U) Criminal In vestica tions 

iLTThe FBI has statutory authority to investigate all federal crime not assigned exclusively to 
another federal agency. (See 28 U.S.C. $ 523; 18 U.S.C. $ 3052; 28 CF.ft. § 0.85 [a]*) 

(LT The FBI also has special investigative jurisdiction to investigate violations of state law in 
limited circumstances. Specifically, the FBI has jurisdiction to investigate felony killings of stale 
law- enforcement officers (28 U.S.C. § 540L violent crimes against interstate travelers (28 U.S.C. 
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§ 540 A), and serial killers (28 U.S.C, § 540B>. Authority to investigate these matters is 
contingent on receiving a request by ait appropriate stale official 

7.4,2 (U) Threa ts to the National Security 

(U } The FBI has authority to investigate threats to the national security pursuant to executive 
orders. Attorney General authorities, and various statutory sonnets. (See E.O. 12333; 50 U.S.C. 
§§ 401 el seq ; 50 IXS.C 1^01 et suq.) 

(U) "Threats to the national security" are specifically defined to mean; international terrorism: 
espionage and other intelligence activities, sabotage, and assassination, conducted by. for, or on 
behalf of foreign powers, organizations, or persons; foreign computer intrusion; and other 
matters determined by the Attorney General, consistent with Executive Order 12333 or any 
successor order. (AGG-Dom. Parr VH.S) 

7.43 (U) Foreign Intelligence Collection 

(U) The FBI authority to collect foreign intelligence derives from a mixture of administrative and 
Statutory sources. (See E.Q, 12333; 50 U.S.C- §§ 401 et scq.; 50 U.S.C. §$ 1801 el seq.; 28 
U.S.C. § 532 note (incorporates the Intelligence Reform and Terrorism Protection Acl, P.L. 108- 
458 §§ 2001 - 2003 ). 

(U) "Foreign Intelligence" is defined as information relating to the capabilities, intentions^ or 
activities of foreign governments or elements thereof, foreign organizations or foreign persons, 
or international terrorists. (AGG-Dom, Part VII.E) 

7S (U) Predication 

(U) A Full Investigation may be opened if there is an "articulable factual basis” that reasonably 
indicates one of the following circumstances exists: 

A] (U) An setiviiy constituting a federal crime or a threat to the national security has or may have 
occurred, is nr may he occurring, or will w may occur and the investigation may obtain 
information relating to the activity or the involvement or role of an individual, group, or 
organization in such activity; 

Bn (U) An individual, group, organization, eniiry, information, property, or activity is or may he a 
target of attack, victimization, acquisition, infiltration, or recruitment in connection with 
criminal activity in violation of federal law ora threat to the national security and the 
investigation may obiain information that would help to protect against such activity or threat: 

or 

C) (U) The investigation may obLain foreign intelligence that is responsive to a PFI requiiGment, 
as defined in DIOG Section 7.4 J. above. 

IU//FOUQ ) Examples ' The following examples have sufficient predication to open a Full 
Investigation: 

A) (U/.TOUO) corroborated information from an intelligence agency states Lhal an individual is a 
member of a terrorist poup: 
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H) {U /FOUO) an analyst discovers cm a blog a threat to a specific honm builder and additions t 
information connecting the h logger to a known terrorist group; and 

C) (U//FOUQ) Fill D1 has posted an authorized PFt requirement For collection. 

7.6 (U) Standards for Opening or Approving a Full Investigation 

( UATOUO ) Before opening or approving the conduct of a Full Investigation, an FBI employee or 
approving official must determine whether: 

A) (LV/FOUO) Adequate predication exist for opening a Full Investigation; 

B) (U//FOUO) The Full Investigation is not based solely on the exercise of First Amendment 
activities or on the race, ethnicity, national origin or religion of the subject or a combination of 
only such factors;; and 

C) fLWFOUQ) The Full Investigation is an appropriate use of personnel and financial resources. 

(U//FOUO) Additional policies regarding Foil Investigations involving any foreign ambassador, 
foreign official, foreign student or exchange visitor* protected persons or premises as subjects 
may be found, in DIOG Appendix G -Classified Provisions [No Foreign Policy Objection 
(NFPO)]. 

(U//FOUO) A Full Investigation cannot be opened solely based on an FBI collection 
requirement. 

7.7 (U) Opening Documentation, Approval, Effective Date, Notice, 

Pending Inactive Status, File Review, and Letter Head Memorandum 

7, 7. 1 (UJ Opening Document a tion 

(U/FOUG) The predication to open a Full Investigation must be documented in the opening EC, 
The appropriate approving authority may grant oral authority to open a Full Investigation if the 
standards for opening or approving a Full Investigation are met. Should oral authorization to 
conduct a Full Investigation be granted, an F,C setting forth the predicating facts* as well as the 
identity of ihe authorizing supervisor and date of oral authorization, must be documented to the 
supervisor who granted the oral authorization, as soon as practicable, but not more than five (5) 
business days after granting the authorization. 

(U/iTOUQ) If at the time of the opening, or at anytime thereafter, the Full Investigation involves 
a sensitive investigative matter, the title/captior must contain the words ‘'Sensitive Investigative 
Matter." 

(U//FOUO) The DIOG prohibits the use of control files or administrative files to document 
investigative activity. See DIOG Appendix J. 

7*7. i.l (U) Approval / Effective Date /Notice 

(U/FOUG) The effective date of the Full Investigation is the date the final approval authority 
(e.g,, SSA or SAC) approves the EC by electronic signal ure/date generated by Sentinel or by 
handwriting their initials and date on the EC. If the Full Investigation is opened on oral 
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authority, the date on which the oral authority was granted is The date the investigation was 
opened. See Section 3.4.2. 2. 

A) {U//FQUO} Owned By a field Gtisw : The opening of n Full Investigation for circumstances 
described in Sections 7. 5. A and 7,5.8 (Lc., for any reason other than to collect intelligence 
that is. responsive to a PFt requirement) by a field office requires prior approval of the SSA 
with written notification within 15 calendar days of the opening to the responsible FBIHQ 
operations! unit. The opening of a Full Investigation of « United Stales person {USPER.} 
relating to a threat to the national security for circumstances described in Sections 7. 5. A and 
7.5.B (i.e.. for any reason other than to collect intelligence Lhttt is responsive to a PFI 
requirement) requires the responsible FB3HQ-NSB unit to notify 1 UCJ NSD as soon as 
practicable, but in all events within 30 calendar days after the investigation is opened nr the 
subject is determined to be an USPER, If the subject of the investigation is a non-L'SPEft and 
later becomes or is determined to be an USPER, the notice provisions in this subsection to 
DO) NSD also apply, 

B) (G//FQUO) Owned By FBIHQ ? The opening of a Foil Investigation by FBIHQ for 
circumstances described in Sections 7,5. A and 7.5.B (i.e J+ for any reason other than lo coiled 
intelligence that is responsive to a PFI requirement) requires prior approval of die DC with 
written noli fical ion within 1 5 calendar days of the opening to any appropriate field office. The 
opening of a Full Investigation by FBIHQ of an USPER relating to a threat to the national 
security for circumstances described in SectEons 7,5. A and 7.5.B ( i_e., for any reason other 
than To Collect intelligence that is responsive lo a PFI requirement) also requires notice to DO.I 
NSD as soon as practicable, but in all events within 30 days alter the investigation is opened 
or the subjeci is determined to be an USPER. If the subject of the investigation is a non- 

US PER and later becomes or is determined to be an USPER, the notice provisions in this 
subsection to the field office and DGJ also apply. 

C) ( LV/FOUO } Semitive investigative Mutters fSIM) : The opening of a Full Investigation 
involving a sensitive investigative matter: 

1 1 (LV/FOUO) SIM Opened By a Field Office : requires prior CDC review and SAC 

approval, and written notification (EC and drsseminahle LHM) lo the appropriate FBIHQ 
operational UC and SC within 15 calendar day's following the opening. Additionally, the 
field office must notify the US AO, in writing, unless such noltfi cation is inappropriate 
under the circumstances (e.g., a public corruption investigation of □ person who is 
personally Close to the United Slates Attorney (USA)), or the mailer is a 
counterintelligence or espionage investigation, (See CD PC for details concerning notice in 
counterintelligence and espionage investigations.) If notice is nol provided to the USAO 
under the circumstances described above, the field office must explain those circumstances 
in the written notice to FBIHQ. The responsible FBIHQ section must notify, in writing, the 
appropriate DOJ Criminal Division official or NSD official as soon as practicable, but no 
later than 30 calendar days after the investigation is opened. The notice must identity- all 
known sensitive investigative matters involved in the investigation (see DIOG Appendix Cl 
-Classified Provisions for additional notice requirements). If a sensitive investigative 
matter arises after the opening of a Full Investigation, investigative activity may continue, 
but the matter must be reviewed by the CDC and approved by the SAC as soon as 
practicable, but not more than five (5) business days thereafter to continue the 
investigation. Notice must be furnished as specified above. 

2) fU /FOUOl SIM Opened By FBIHQ : requires prior 0GC review and SC approval, and 
written notification (EC and dlsseminable LHM) to any appropriate field office within 15 
calendar day's following the opening. Additionally, FBIHQ operational unit must notify 1 the 
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appropriate U$AO(s) in writing, unless such notification is inappropriate under the 
circumstances (e.g., a public corrupt ian investigation of a person who is personally close to 
the USA) or the matter is a counterintelligence or espionage investigation; and the 
appropriate lX)J Criminal Division official or N&D official, as soon as practicable, hut no 
later than 30 calendar days after such an investigation is opened. (See CD PG for details 
concerning notice in counterintelligence and espionage investigations.) If notice is noi 
provided to the USAO under the ^circumstanceE 1 "' exception described above, FBI HQ must 
explain the circumstances in the written notice to the field offices) and DOJ. The notice 
must identity- all known sensitive investigative matters involved in the investigation (see 
DLOG Appendix G - Classified Provisions for additional notice requirements J. If a 
sensitive investigative matter arises after the opening of a Full Investigation, investigative 
activity may continue* bul the matter must be reviewed by OGC and approved by the 
appropriate FBIHQ SC as soon as practicable, bul not more than five (5) business days 
thereafter to continue the investigation. Notice musl be furnished as specified above. 
(AGG-Dom. Part II.B.5,a) 

D) (UATOUQ) Post five Foreien Intelligence Pull Investigation : Hie opening of a Full 
Investigation in order to collect positive foreign intelligence for circumstances described in 
Section 7.5.C above must he approved a s provided in DiOG Section y, Add hi finally* -written 
notification to FBIHQ Domain. Collection, HUM INI Management Section fDCHMSl SC and 
DOJ NSD is required as soon as practicable but no laler than 30 calendar days after opening 
(he investigation. 

E) ( U/’FOUQ) t'RUlQ Dr.\upprmes Opening : Fhe FAD far the National Security Branch (NSB) 
must notify the Deputy Attorney General if FBIHQ disapproves a field office's opening of a 
Full Investigation relating to a threat to the national security on the ground that ihc predication 
for the investigation is insufficient, and the EAD for the NSB is responsible for establishing a 
system that wilt allow lor the prompt retrieval of such denials, (AGG-Dom, Part EI.BJ.d) 

7. 7,2 (U ) Pending Inactive Sta tus 

(U/FOUO) A Full Investigation may be placed in '‘pending inactive* status once all logical 
investigation has been completed and only prosecutive action or other disposition remains to be 
reported. Examples of Full Investigations that may be placed in Spending inactive" status would 
include* bul not be limited to: criminal investigations pending an appeal; fugitive investigations, 
when all logical investigation has been conducted and the subject is still in fugitive status; 
parental kidnapping investigations, when the parent who kidnapped the child is residing in a 
foreign country and the local authorities will not or cannot extradite the subject back to the 
United States. 

7.73 (U) File Review 

(U/FOUO) Supervisory file reviews must be conducted at least once every 90 days in accordance 
with DIOG Section 3.4,4. File reviews for probationary FBI employees must be conducted at 
least every tit) days, 

7 . 7. 4 (U) A NNUA L LETTERHEA D MEMORANDUM 

(U/FOUO) Annual letterhead memoranda regarding the status of Full Investigations are rot 
required by the AGG-Dom; however, the FBIHQ operational divisions may require such reports 
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in their PGs, See foreign intelligence collection in Section 9 for annual reporting requirements to 
FBIHO DCHMS and DOi. 

7.8 (U) Standards for Opening or Approving the Use of an Authorized 
Investigative Method in Full Investigations 

(U//FOUO) Prior to opening or approving the use of an investigative method, an FBI employee 
or approving official must determine whether: 

A) (U//FOUO) The use of the particular investigative method is likely lo further the aulhorized 
purpose of the Full Investigation: 

B| fU/i'TOIJO) The investigative method selected is the least intrusive method, if reasonable 
based upon the circumstances of the investigation; 

C) {U//FOLJO) If the Full Investigation is for collecting positive foreign intelligence, the FBI is 
operating openly and conscnsually with a USPER. to the extent practicable: and 

D) (U//FOUO) The method lo be used IS an appropriate use of personnel and financial resources. 

7.9 (U) Authorized Investigative Methods in Full Investigations 

(U) All lawful methods may be used in a Full Investigation, unless the investigation is to colled 
foreign intelligence. A complete discussion of these investigative methods, including approval 
requirements, is contained in Section IS . The use or dissemination of information obtained by the 
use of these methods must comply with the AGG-Dom and DIOG Section 14. The foi Lowing 
investigative methods are authorized to be used in ail Full Investigations, other than 
investigations to collect foreign intelligence: 

A) (U) Public information. (Section Ift-j.P 

B) (U) Records or information - FBI and PGJ, (Section IS, 5.2) 

CMU} Records or information - Giber federal, state, locaL tribal, or foreign government agency. 
(Section 1 8.5 .3 1 

D) (TJ> On-line services and resources. {Section fK.5.4 ) 

E) (U) CHS use and recruitment, (Section 1S.5.5 ) 

F) (U) Interview or request information from the public or private entities. (Section 18.5.6 ) 

G) (U> Information voluntarily provided by governmental or private entities, (Section ]$JLB 

H) (U) Physical Surveillance (not requiring a court order}. (Section IK.5.8 ) 

L) (U) Consensual monitoring of communications, including electronic cointmmicsitions, 

(Section 18.6,1 ) 

(U//FOUG) Note: For those state, local and tribal governments that do not sanction or provide 
a law enforcement exception available to the FBI for one-panfy consent recording of 
communicEiiitini with persons within their jurisdiction, the SAC must approve the consensual 
monitoring of communications as an Otherwise Illegal Activity (QIAf Prior lo the SAC 
authorizing the GIA, one-party consent must be acquired. The SAC may delegate the OIA 
approval authority to an Assistant Special AgenMoCharge ( ASAC) or Supervisory Special 
Agent (SSA). 
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(U//FOUO) See the classified provisions in Appendix G for additional information . 

4) (U) Intercepting the communications of a computer trespasser (Section I 8.6,2 1 

K) (U) Closed-circuit television-video surveillance, direction finders, and other monitoring 
devices. (Section 18,6.31 

L) (U) Administrative subpoenas. (Section 1H.6 .4I 

M) (U) Grand jury subpoenas, (Section 18.6.51 

N ) (U) National Security Letters. {Section lS.fi.fi I 

0| fU) FISA Order for business records. (Section 18.6.7 ). 

P) (LT) Stored wire and electronic communications and transactional records. (Section lW.fr. 8 ) 

Q) (U) Fen registers and traprirace devices. (Section 18. 6.. 9) 

R) (U) Mail cavers. (Section 18.6.U H 

5) (U) Polygraph examinations. (Section 1 8.6, 1 1 1 

T) (Lf ) Trash Covers (Searches that do not require a warrant or court order), (Section I H.fi. 1 1 ) 

U) (U) Undercover Operations (Section lfl.6,1 J) 

V) (U) Searches with a warrant or court order, (Section 18-7,1) 

WXUJ Electronic surveillance - Title III. (Section 18.7.2) 

X)(U) Electronit surveillance - FISA and FISA Title VI f (acquisition of foreign intelligence 
information). (Section 18.7J ) 

(U) See the classified provisions in DIOG Appendix G for additional information. 

7.10 (U) Sensitive Investigative Matters [SIM) in Full Investigations 

(U//FQUO) The till axapl ion of the opening or subsequent EC for a Full Investigation involving 
a sensitive investigative matter must contain the words “Sensitive Investigative Matter." DIOG 
Section 10 contains the required approval authority and factors to be considered when 
determining w hether to conduct or approve a Full Investigation involving a SIM. 

7.10.J (U) SIM Categories in Full Investiga tions 

(U/FOUG) A SIM is an investigative mailer involving the activities of a domestic public official 
or domestic political candidate (involving corruption ora threat to the national security),, 
religious or domestic political organization or individual prominent in such an organization, or 
news media, an academic nexus, or any other matter which, in the judgment of the official 
authorizing an investigation, should be brought to the attention of FBI HQ and other DOJ 
officials. ( AGG-Dom. PaTt VII. N). As a matter of FBI policy, “judgment" means that the 
decision of the authorizing official is discretionary DIOG Section IQ and or the DIOG Appendix 
G - Classified Provisions define domestic public official, domestic political candidate, religious 
or domestic political organization or individual prominent in such an organization, news media, 
and academic nexus. 
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7.10.2 (U)Aca demic Nexus in Full Investiga tions 

(U/FOUO) As a matter of FBI policy, an investigative activity having an "academic nexus’* is 
considered a SIM if: 

A) (U/FOUQ) the investigative activity involves matters related to the responsibilities of an 
administrator or faculty member employed by any college or university that is located inside 
the United Stats, provided the matter under a Predicated Investigation is related to the 
individual's position ai the institution; or 

B) (TJ//FO UO) die matter involves any student association recognized and approved by the 
col lege or university at which the student association at issue is located, and the college or 
university is located inside the United States, 

(LI//FOUO) The sensitivity related u> an academic institution arises from the American tradition, 
of "academic freedom” (i.e., an atmosphere in which students and faculty arc free to express 
unorthodox ideas and views and to challenge conventional thought without fear of repercussion). 
Academic freedom docs not mean, however, that academic institutions are off limits to FBI 
investigators in pursuit of information or individuals of legitimate investigative interest. 

(LWFGUG) For matters not considered a sensitive investigative matter even though there is an 
academic nexus, see the classified provisions in DIQG Appendix G. 

7,11 [U) Intelligence Collection (le„ Incidental Collection) 

(U//FOUO) Intelligence that is responsive to PFI requirements, FBI national collection 
requirements, and FBI field office collection requirements may be collected incidental to a 
Predicated Investigation, When information that is responsive to these requirements is 
incidentally collected in a Predicated Investigation, it should be forwarded to the FIG for 
evaluation and potential dissemination against collection 
nequ i rements http: //hum e.fb i nct-tbt / form s / M 1 0 Zfl / P IOC /Us ts / Program Pe l icy 
G u ides / All Items.aspx . (See DIOG Section 15.6. 1 -2 - Written Intelligence Products) All incidental 
collection must be documented in the I? 1 51 field office file. 

{U.VFOUO) Prior to submitting to the FIG any information that may be evidentiary and therefore 
potentially discoverable, the FBI employee should discuss with the CDC or OGC the potential 
impact disseminating die information in an intelligence product may have on the prosecution of 
the investigation. To the extent dissemination might or is likely to have an adverse impact on the 
prosecution, the FBI, in consultation with the prosecuting attorney, must assess whether the need 
for dissemination outweighs the probable impact the dissemination may have on the prosecution. 

(U) Because the authority to collect positive foreign intelligence enables the FBI to obtain 
information pertinent to the United States' conduct of its foreign affairs, even if that information 
is not related to criminal activity or threats to the national security, the information gathered may 
concern lawful activities. Accordingly, the FBI must operate openly and consensual I v with an 
USPFR to the extent practicable when collecting positive foreign intelligence that does not 
concern criminal activities or threats to the national security. 


7-9 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Version Etamrfi 
October 15.20 11 


UNCLASSIFIED FOR OFFICIAL USB ONLY 
§7 Domestic Investigations and Operations Guide 

7.12 (II) Standards for Approving the Closing of a Full Investigation 
7.12,1 (U) Standards 

(U//FOUG) At the conclusion of a Full Investigation, each of the following items must be 
documented in the dosing communication [EC und'or LilM): 

A) (U//FOUO) A summary of (he results of the investigation; 

B) CU//TOUOli Whether sufficient personnel and financial resources were expended on the 
investigation, or an explanation/justifcation for not expending sufliciem resources 

C) (U/.i'FOUO) Whether logical and reasonable investigation was completed; 

D) (U//FOUOI Whether all investigative methods/tedsniqtia initiated have been completed 
and/or discontinued; 

El (U//FOUO) Whether all leads set have been completed and/or discontinued; 

F) (U//FOUO) Whether all evidence has been returned, destroyed or retained in accordance with 
evidence policy; and 

G) (U//FOUO) A summary statement of the mason the Full Investigation will be closed, and 
selection of the appropriate dosing status; 

1) (U//FQUO)C-4: Administrative Closing, which includes; 

a) (U//FOUO.) No further investigation is warranted because logical investigation and/or 
leads have been exhausted, and the investigation to date did not identify a criminal 
violation or a priority threat to the national security 

b) (U//FOUO) Investigation assigned a new file number 

c) (U//FOUO) Investigation consolidated into a new tile number or an existing tile number 

d) (U//FOUO) LJnaddressed Work Investigation tile closed because no investigation or no 
further investigation will be conducted 

2) {U//FOUO) C-5: USA Declination Closing, which includes; 

a) (U//FOL r O) The USAO declined prosecution individual matter declination 

b ) 0J//FOUO) The USAO declined prosecution - blanket declination 

3) {U//FQUO) C*G; Other Closing, which includes; 

a) (U//FOUO) Final prosecution or final prosecutive action has been completed 

b) (U//FOUQ) National security investigation has been completed 

c) f UA'FOUO) Prosecution became non- viable for national security reasons 
dj (U//FOUO) A federal grand jury' relumed a ‘ L No Tnic Bill” 

e) (U/7FOUG) A nolle prosequi has. been entered with the court 

1) ( U//FOUO) any other reason for c los i ng 
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7.12.2 (U) A ppro val Requirements to Close 

t 1 FOUO) The appropriate closing supervisor described below must review and approve the 
dosing communication fas described in Section 7.32.1 ) to ensure it contains the above-required 
information and sufficient details of the investigation on which to base the decision to dose the 
Full Investigation, The closing .supervisor must note on the dosing document X the dosing 
number 4, 5 or 6 (c,g., C-4. C-5 or Ofi) and the dosing date. Although there is no duration limit 
Fora Full Investigation, the investigation must be dosed upon all investigative activity being 
exhausted. The appropriate closing supervisors are: 

AhU ' TQL'U) Opened hr a Field Office : Closing a Full lnve&tigsuiun opened by <t field office 
requires approval from the SSA. Notification to the FB1HQ operational unit may be required 
by division PGs, 

R) (U /FOUQ) ttaejjctf frr FHIHO : Closing a Full Investigation opened by FBI HQ requires 
approval from the UC and notification to (he approprialc field office, 

C) {U//FOUO \ S/M Ootiu/d h\ U Field (fflkv : Closing a Full Investigation opened by a field 
office involving a sensitive investigative matter requires approval from the SAC and written 
notification to the FBIHQ operational unit and section and the US AO, if the USAO was 
notified of the opening, 

DJ (WFQUOJ Sflf Opened b r HU HO : Closing a Full Investigation opened by FBIHQ 
involving a sensitive investigative matter requires approval from the SC and written 
notification io die appropriate field office. 

E) (LWFQUG) Positive f oreign fttleltiaence ; [ See DIQG Section 

7.13 (U) Other Program Specific Investigative Requirements 

t U FOLD) To facilitate compliance with investigative program-specific requirements, the FBI 
employee should consult the relevant division’s PG to ascertain any program-specific 
requirements, FBIHQ division PGs, however, may not contradict, alter or otherw ise modify the 
standards established in the DIOG. 
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8 (U) ENTERPRISE INVESTIGATIONS (El) 


8.1 (U] Overview 

(Hi An Enterprise Investigation (El) may only be opened and operated as a Full Investigation 
and is subject to the same requirements that appJy to a Full Investigation as described in DIOG 
Section 7. although there are additional approval requirements that affect Enterprise 
Investigations. An Enterprise Investigation focuses on a group or organization that may be 
involved in the most serious criminal or national security threats to the public, as described in 
Section 8.5 below. An Enterprise investigation cannot be conducted as Preliminary Investigation 
or an Assessment, nor may they be conducted for the sole purpose of collecting positive foreign 
intelligence IP FI I, See Section 8.2, below, regarding Preliminary Investigations and 
Assessments. 

8.2 (U) Purpose, Scope and Definitions 

(U ) Enterprise defined : An enterprise is a group of persons associated together for a common 
purpose of engaging in a course of conduct. The term “enterprise" includes any partnership, 
corporation, association, or other legal entity, and any union or group of individuals associated in 
fact, although not a legal entity, 

(U) Associated in fad defined : The term "associated in fact" means the persons have an 
ongoing organization, formal or informal, and that the persons function together as a continuing 
unit, 

MJ) PurmisevSnme ; The purpose of an Enterprise Investigation is to examine the structure, 
scope, and nature of the grouper organization including: its relationship, if any, to a foreign 
power; the identity and relationship of its members, employees, or other persons who may be 
acting in furtherance of its objectives; its finances and resources; its geographical dimensions; its 
past and future activities and goals; and its capacity for harm, (Attorney General’s Guidelines for 
Domestic FBI Operations (AGG-Dom), Part IIC-2) 

(U) Note : Enterprise Investigations were designed, among other tilings, to combine and replace 
the traditional “Racketeering Enterprise Investigations” (92 classification) and “Terrorism 
Enterprise Investigations 11 (100 classification J, An Enterprise Investigation is only authorized La 
be opened on the most serious eriminal or national security threats. The term Enterprise 
Investigation as used in the DIOG should not be confused with other usages of the word 
"enterprise” such as criminal enterprise investigations (e.g., 281 classification, 245 
classification, etc.}, which are not Enterprise Investigations as defined in DIOG Section 8. See 
DIOG Sections 8,4 and 8,5. 

(U//FOUO) Although an Enterprise Investigation may not be conducted as a Preliminary 
Investigation, a Preliminary Investigation may be used to determine whether a group or 
organization is a criminal or terrorist enterprise if the FBI has “information or an allegation” that 
an activity constituting a federal crime or a threat to the national security has or may have 
occurred, is or may be occurring, or will or may occur, and the investigation may obtain 
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information relating to the activity of the group or organization in such activity. An Assessment 
may also be opened to determine whether a group or organization is involved in activities 
constituting violations of federal criminal law or threats to the national security, 

9,3 [U) Civil Liberties anu Pkivacv 

(U)The pursuit of legitimate investigative goals without infringing upon the exercise of 
constitutional freedoms is a challenge that the FBI meets through the application of sound 
judgment and discretion. In order to protect civil liberties in the conduct of criminal and national 
security investigations, every Full Investigation, including an Enterprise Investigation under this 
subsection, must have adequate predication documented in the opening communication. 

(U> No investigative activity, including an Enterprise Investigation, may be taker solely on the 
basis of activities thal are protected by the First Amendment or on the race, ethnicity, national 
origin or religion of the subject ora combination of only those factors. An Enterprise 
Investigation of groups and organizations must focus on activities related to the threats or crimes 
being investigated* not solely on First Amendment activities uron the race, ethnicity, national 
origin or religion of the members of the group or organisation. In this context, it is particularly 
important dearly lo identify and document the law enforcement or national security basis of the 
Enterprise Investigation. 

(U//FOUO ) Example : Groups who communicate with each other or with members of the public 
in any form in pursuit of social or political causes — such as opposing war or foreign policy, 
protesting government actions* promoting certain religious beliefs, championing particular local, 
national, or international causes, or a change in government through non-criminal means, and 
actively recruit others to join their causes -have a fundamental constitutional right to do so. An 
Enterprise Investigation may not be opened based solely on the exercise of these First 
Amendment rights. 

(U) The AGCFDom authorizes all lawful investigative methods in the conduct of an Enterprise 
Investigation. Considering the effect on the privacy and civil liberties of individuals and the 
potential to damage the reputation of individuals, some of these investigative methods are more 
intrusive than others. The least intrusive method if reasonable based upon the circu in stances of 
the investigation is to be used, but the FBI must not hesitate to use any lawful method consistent 
with the AGG-Dom A more intrusive method may be warranted in light of the seriousness of a 
criminal or nation a! security threat, 

(U) By emphasizing the use of the least intrusive means lo obtain information, intelligence 
and/'or evidence. FBI employees can effectively execute their duties while mitigating the 
potential negative impact on the privacy and civil liberties of all people encompassed within the 
investigation, including targets, witnesses, and victims. This principle is not intended to 
discourage FBI employees from seeking rote van! and necessary intelligence, information, or 
evidence, bill rather is intended to encourage FBI employees to choose the least intrusive — but 
still effective means — from the available options lo obtain the information , intelligence or 
evidence. See DIOG Section 4.4. 
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8.4 (U) Predication 

(U) A Full Investigation of a group or organization may be opened as an Enterprise Investigation 
if there is an articulable factual basis for the investigation that reasonably indicates the group or 
organization may have engaged, or may be engaged in, or may have or may be engaged in 
planning or preparation or provision of support for: (AGG-Dom. Part ILC. I ) 

A) ( U) Racketeering Activity : 

(U) A pattern of racketeering activity as defined in IS U-S-C. § 1961(5) -(92 and 3 05 A 
matters may be opened as Enterprise Investigations-Rackelcering Activity (El/RA)); 

B) (U) lrHcn*at»uia| Terrorism : 

jU) international terrorism, as defmed in IS LLS.C. § 233] and AGG-Dom, Part VII.J or other 
national security threat - (415 matters may be opened as Enterprise Investigations); 

C) (U) Domestic Terrurism : 

1) ( U ) Domestic terrorism as defined in IS U.S.I . § 2331(5) involving a violation of federal 
criminal law ’ (100 matters may be opened as Enterprise Investigations): 

2) (U) Furthering political or social goals wholly or in pit through activities that involve 
force or violence and a violation of federal criminal law - ( 100 matters may be opened as 
Enterprise Investigations); or 

3) (U) An utlense described in IS ILS.C. g 2332Hg)(5)(B> or IS U.S.C. § 43 - 1 100 matter 
may be opened as Enterprise Investigations). 

(U) The "‘articulable factual basis'’ for opening an Enterprise Investigation is met with the 
identification of a group whose statements made in furtherance of its objectives or its conduct 
demonstrate a purpose of committing crimes or securing the commission of crimes by others. 

The group’s activities and statements of its members may be considered in combination to 
comprise the "articulable factual basis.*’ even if the statements alone or activities alone would not 
warrant such a determination. 

(U//FOUQ) Examples : The following examples demonstrate sufficient predication to open an 
Enterprise Investigation: 

A) (U//FOLFO) The "North Euere Liberation Array" declares its intent to obtain dangerous 
biological agents in the United States to support its fight against the South Lucre Liberation 
Army, even though the FBI has no evidence that il has acquired anything. 

B) (U/.FOUO) Organized crime family members extort a number of contractors in a particular 
industry for illicit economic gain. 

C) (U/AP0UO) A group known as "Basket of Cuddly Puppies" harshly denounces puppy mills, 
and several puppy mills become the Victim of arson, short iy after which internet posting 
appear on the group’s website staling, "Now, maybe they’ll roke us seriously.” If there were 
only a harsh denouncement and no link to the crimes, this would not constitute predication for 
an FriterpriM; Investigation because the only fact known about the group would be its 
denouncement of puppy mills — an action protected by (he First Amendment. 
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8.5 (U) Standards for Opening or Approved an Enterprise Investigation 

(U//FGUO) Before opening or approving the conduct of an Enterprise investigation, an FBI 
employee or approving official must determine whether: 

A) (U//FOUQ) Adequate predication exists for opening an Enterprise investigation: 

B) (U//TOUO) The Enterprise Investigation is not btised solely on the exorcise of First 
Amendment activities or on the race,, ethnicity, national origin or religion of the subject or a 
combination of only such factors; and 

C) (U/iTOL'G) The Enterprise investigation is an appropriate use of personnel and financial 
resources. 

(U//FOUO) Additional policies regarding Lnterprise investigation involving any foreign 
ambassador, foreign official, foreign student or exchange visitor, protected persons or premises 
as subjects may be found in DIDO Appendix G - Classified Provisions [No Foreign Policy 
Objection (NFPO)]. 

(U//FQUO) A Predicated Investigation, including an Enterprise Investigation, cannot be opened 
solely based on an FBI collection requirement. 

8.6 (U) Opening Documentation, Effective Date* Approval, Notice, and 
File Review 

8. 6 . 1 (U) Opening Documenta tion 

(U//FOUO) The predicattcm to open an Enterprise Investigation must be documented in the 
opening elecironic communication (EC). 

(U//FQUO) If at the time of the opening, or at anytime thereafter, the Enterprise Investigation 
(El) involves a sensitive investigative matter (SIM), the tille/caption must contain the words 
"■Sensitive Investigative Matter,' 1 

(U /FOUO) The appropriate approving authority (Section Chief) may grant oral authority to open 
an Enterprise Investigation if the standards for opening or approving an Enterprise Investigation 
are met. Should oral authorization to conduct an Enterprise Investigation be granted, an EC 
setting forth the predicating facts, as well as the identity of the approving official s) (i,e„ SC), 
and the date of oral authorization must be documented to the approving official! s) who granted 
the oral authorization as soon as practicable, but noi more than Five (5) business days after 
granting oral authorization. 

(U//FOUO) The DIOG prohibits the use of control files or administrative files to document 
investigative activity, (See DIOG Appendix J) 

8. 82 (U) Effective Da te 

(U//FOUO) The effective date of the Enterprise Investigation is the date the final approval 
authority (i u„ SC) approves the EC by electronic signature/date generated by Sentinel or by 
handwriting their initials and date on the EC. If the Enterprise Investigation is opened on oral 
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authority, the dale on which the oral approval authority was granted is the effective dale. Sec 
DIOG Section 3 4 2.2. 

8.6.3 (U) A ppro va l Req i iwements for Opening an ENTERPRISE Invests a i ion 

8.6.3. 1 (U) El Opened rv a Field Office with Section Chief Approval 

(U.'.FOUO) The opening of an Enterprise Investigation by an FBI Held office requires the 
prior approval of the appropriate FBIHQ SC. as well as written notification to the United 
Slates Attorney’s Office (USAO) and the Department of Justice (DOJ) as specified below. 

8.6. 3 .2 [If) El O PEhTD by FBI H Q with Section Chief Ap pro val 

(U//FQUO) The opening of an Enterprise Investigation by an FBIHQ division requires the 
prior approval of the appropriate FBIHQ SC, as well as written notification lo the appropriate 
field officc(s), USAO and DOJ as specs lied below 

8.G.3.3 [UJ SIM El Opened by a Field Office with Special At; ent in Charge and 
Section Chief Approval 

(U/F0UO) A SIM Enterprise Investigation opened by a field office requires prior CDC 
rev iew. SAC and appropriate FBIHQ SC approval, and w ritten notification to DOJ in the 
form of an LHM or similar documentation. The IHM or similar documentation for 
dissemination to DOJ must be submitted to the appropriate FBIHQ operational section within 
] 5 calendar days following the opening. Additionally, the field office must notify the USAO, 
m writing, unless such notifiealion is inappropriate under the circumstances (e.g.* a public 
corruption Enterprise Investigation of a group that is personally close to the United States 
Attorney (USA)), or the matter is a counterintelligence or espionage investigation, {See CD 
PG for details concerning notice in counterintelligence and espionage investigations.) If 
notice is not provided lo the USAO under the circumstances described above, the field oftiee 
must explain those circumstances in the written notice to FBIHQ. The responsible FBIHQ 
operational section must notify, in writing, the appropriate DOJ Criminal Division or National 
Security Division (NSD) official as soon as practicable, hut no later than 30 calendar days 
after the investigation is opened. The notice must identify all known sensitive investigative 
matters (SIM) involved in the Enterprise Investigation (see DIOG Appendix G Classified 
Provisions for additional notice requirements). 

L FQUQ) If a SIM arises after the opening of an Enterprise Investigation, investigative 
acriv ity may continue, but the matter must be reviewed by the CDC and approved by the SAC 
and appropriate FBIHQ SC as soon as practicable, but not more than five (5) business days 
LhereafkrtD continue the investigation. Notice must be furnished as specified above, 

8 .6.3,4 (U) SIM El Opened bv FBIHQ with Section Chief Approval 

L FOLIO) A SIM Enterprise Investigation opened by FBIHQ requires prior GGC review 
ir-i m approval, and written notification to DOJ and appropriate field officc(sJ in the form of 
I KM or similar documentation. The LHM or similar documentation for dissemination to 
- . 2 LifficeQ) must be submitted within 15 calendar days following the opening. 
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Additional!) . the FBIHQ operational unit must notify the appropriate USAG(s) in writing, 
unless such notification is inappropriate under the circumstances (e,g„ a public corruption 
Enterprise Investigation of a group that is personally dose to the USA), or the matter is a 
counterintelligence or espionage investigation. (See CD PG for details concerning notice in 
counterintelligence and espionage investigations.) If notice is not provided to the USAO 
under the circumstances described above, the FBEHQ operational unit must explain those 
circumstances in the written notice to the field nffirc(s) and DOJ. The responsible FRJHQ 
operational section must notify, in writing, the appropriate DOJ Criminal Division or National 
Security Division {NSD} official as soon as practicable, but no later than 30 calendar days 
after the investigation is opened. The notice must identify 1 all known sensitive investigative 
matter? (SIM( involved in the Enterprise Investigation (see DIGG Appendix G - Classified 
Provisions for additional notice requirements}. 

(L'/TOUG) If a SIM arises after the opening of an Enterprise Investigation, investigative 
activity may continue, but the matter must be reviewed by OGC and approved by the 
appropriate FBI HQ SC as soon as practicable, but not more than five (5) business days 
thereafter to continue the investigation. Notice must be furnished as specified above, 

8.6.4 ( U) Notice Requirements 

(U FOUQ) FB1HQ division PGs may require specific taels to be included in a field office 
request to open an Enterprise Investigation. At a minimum, (he request must include whether the 
Enterprise Investigation m a SIM. 

tl FOUO) The responsible FBIHQ section must notify the DOJ NSD or the Organized Crime 
and Racketeering Section (OCRS) of the opening of an Enterprise Investigation by a field office 
or by FBIHQ, as soon as practicable but no later than 30 calendar days after the opening of the 
investigation, 

■ V FOUO) For Enterprise Investigations that involve groups of persons who pose a national 
security threat, the responsible DOJ component for the purpose of notification and reports is the 
NSD. For Enterprise Investigations relating to a pattern of racketeering activity that dries not 
involve a, national security threat, the responsible DOJ component is the OCRS of the Criminal 
Division, (AGG-Dom. Part H.C.3) 

I If | The Assistant Attorney General for National Security or the Chief of the OCRS, as 
appropriate, may at any lime request the FBI to provide a report on the status of an Enterprise 
Investigation, and the FBI will provide such reports as requested. (AGG-Dom, Part It C.JLd) 

8.6.5 (U) File Review 

• U FOUO) Supervisory file reviews must be conducted at leasl once every 90 days in 
accordance with DIOG Section 3,4.4. File reviews for probationary agents must be conducted at 
least once every bO days. 
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9.7 ( U ) Authorized Investigative Methods in an Enterprise Investigation 

(U//FOUO) An Enterprise Investigation may only be opened and operated, as a Full Investigation 
and is subject to the same requirements that apply to a Full Investigation. Therefore, the 
standards for opening Of approving the use of investigati ve methods and the availability of 
investigative methods that may be used in an Enterprise Investigation arc the same as set forth in 
Sections 7.8 arui 7.9. 

8.8 (U) Sensitive Investigative Matters (SIM) in Enterprise 
Investigations 

(U//FOUO) The titleeaption of the opening or subsequent EC fora Full Enterprise Investigation 
involving a sensitive investigative matter must contain the words “Sensitive Investigative 
Matter.” DIQG Section 10 contains the required approval authority and factors to be considered 
when determining whether to conduct or approve a Full Enterprise Investigation involving a 
SIM. 

8. 8 A (V) SIM Ca tegories in Enterprise Invests a tions 

(U FOUO) A SIM h an investigative matter involving the activities of a domestic public official 
or domestic political Candidate (involving corruption or a threat to the national security), 
religious or domestic political organization or individual prominent in such an organization, or 
news media, an academic nexus* or any other matter which, in the judgment of the official 
authorizing an investigation, should be brought to the attention ofFBIHQ and other DUJ 
officials. (AGG-Dom, Part VII. N), As a matter of FBI policy, “judgment 11 ’ means that the 
decision of the authorizing official is discretionary. DIQG Section 10 and/or the DIQG Appendix 
G - Classified Provisions define domestic public official, domestic political candidate, religious 
or domestic political organization or individual prominent in such an organization, news media, 
and academic nexus. 

fl.fi . 2 (U)ACA DEMIC NEXUS IN ENTERPRISE In VESTICA TIONS 

FOOD) As a matter of FBI policy, an investigative activity having an “academic nexus 1 ’ is 
considered a SIM if 

A i < U//FOUO) the investigative activity involves matters related to the responsibilities of an 
administrator or faculty member employed by any college or university that is located inside 
the United States, provided the matter under a Predicated Investigation is related to the 
htdividuftl'S position at the institutions or 

B) a. FOUO) the matter involves any student association recognized amt approved by the 
college or university at which the student association at issue is located, and the college or 
university is located inside the United States, 

l FOUO) The sensitivity related to an academic institution arises from the American tradition 
-""±4 --temic freedom” fe.g„ an atmosphere in which students and faculty are free to express 
"v do\ ideas and views and to challenge conventional thought without fear of repercussion), 
freedom does not mean, however, that academic institutions are off limits to FBI 
■ . __i:ors in pursuit of information or individuals of legitimate investigative interest. 
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(U//FOUO) For mailers not considered, a sensitive investigative matter even though there is an 
academic nexus, see the classified provisions in DIOG Appendix G. 

8.9 (U) Intelligence Collection (le.. Incidental Collection] 

(U//FOUO) Intelligence that is responsive to PFl requirements, FBI national collection 
requirements and FBI field off ce collection requirements may be collected incidental to an 
Enterprise Investigation. When information that is responsive to these requirements is 
incidentally collected during an Enterprise Investigation, it should he forwarded to the Field 
Intelligence Group (FIG) for evaluation and potential dissemination against collection 
requirements. (See DK3G Section 15.6.1.2 - Written Intelligence Products) All incidental 
collection must be documented in the SI 51 field office file. 

(U//FGUO) Prior to submitting to the FIG any inform ation that may be evidentiary and therefore 
potentially discoverable, the FBI employee should discuss with the CDC or CXiC the potential 
impact disseminating the information in an intelligence product may have on the prosecution of 
the investigation. To the extent dissemination might or is likely to have an adverse impact on the 
prosecution, the FBI, in consultation with the prosecuting attorney, must assess whether the need 
for dissemination outweighs the probable impact the dissemination may have on the prosecution. 

8.10 (U) Standards for Approving the Closing of an Enterprise 
Investigation 

8.10.1 (U) Standards 

(U//FOUO) At the conclusion of an Enterprise Investigation, each of the following items must he 
documented in the closing communication (EC and/or LHM): 

A) (U//F0UO) A summary of the results of the investigation; 

B) (U'/POUO) Whether logical and reasonable investigation was completed: 

C) (U'/FOUO) Whether all investigative methods initiated have been completed flnd/or 
discontinued; 

D) (U//FOUO) Whether all leads set have been eomplelcd and/or discontinued; 

E) (U/'FOIJO) Whether all evidence has heen returned, destroyed or retained in accordance with 
evidence policy; and 

F) (UFOUO) A summary statement of the basis on which the Enterprise investigation will be 
closed, and selection of the appropriate closing status; 

I) (U/'/FOUO) C-4: Administrative Closing, which includes: 

a) (U//FOUQ) No further investigation is warranted because logical investigation and/or 
leads have been exhausted, and die investigation to date did not identify a criminal 
violation or a priority threat to the national security 

b| (U//FQUG) Investigation assigned a new file number, or 

c) (U//FOUO) Investigation consolidated into a new file number or an existing file 
number. 
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2) {U//FOUO) C-6: Other Closing, which includes; 

a) (U//FOUO) Enterprise Investigation has been completed; or 
b } ( U//FOU 0 1 Any other type of dost tig 

8. 1 0,2 (U) A pprq val Requirements to Close 

{ U//FOUO) The appropriate closing supervisor described below must review and approve the 
dosing communication {as described in Section K. 10 J ) to ensure it contains the above -required 
information and sufficient details of the investigation on which to base the decision to dose the 
Enterprise Investigation, The dosing supervisor must note on the dosing document "CY’ the 
closing status using 4 or 6 (e.g,. C-4 or C-6) and the closing date. Although there is no limit on 
the duration of an Enterprise Investigation, the investigation must be closed upon all 
investigative activity being exhausted. The appropriate closing supervisors are; 

A ) (U//FOUO) Opened ftr a Field Office with FBIHQ SC Approval : Closing an Enterprise 
Investigation opened by a field office requires the prior approval of the appropriate FBI HQ 
SC. 

Bli (U'.'FOUOj Opened by FBIHO ; Closing art Enterprise Investigation opened by FBI I IQ 
requires approval from the appropriate SC and notification to the appropriate field office. 

C) (U//FOUO) SIM Opened by b FkJd Office with FBfHQ SC Annwat : Closing am Enterprise 
Investigation opened by a field office involving a sensitive investigative matter requires 
approval from the appropriate FBIHQ SC. 

(U//FOUO) SIM Opened fey 1 IBHIjh Hosing an Enterprise Investigation opened by FBIHQ 
involving a sensitive investigative matter requires approval from the SC, and w ritten 
notification io the appropriate field office- 

8.1 1 (U) Other Program Specific Investigative Requirements 

(U//FOUO) To facilitate compliance with invest igaii% r e program-specific requirements, the FBI 
employee should consult the relevant division's PG to ascertain any program-sped fic 
requirements. FBIHQ division PGs, however, may not contradict, alter or otherwise modify the 
standards established in the DKXi 
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9 (U) FOREIGN INTELLIGENCE 


9.1 (U)OvtRVlEW 


(L 1 ) I ftrcian lntclliflen.ee defined : Foreign intelligence is “information relating to the 
capabilities, intentions, or activities of foreign governments or dements thereof, foreign 
organizations, or foreign persons, or international terrorists." A “Foreign Intelligence 
Requirement” is a collection requirement issued under the authority of the Director of National 
intelligence (DNI) and accepted by the FBI Directorate of Intelligence (Dl). Additionally, the 
President a United States Intelligence Community (US JC) office designated by the President, the 
Attorney General. Deputy Attorney General, or other designated Department of Justice (DOJ| 
official may levy a foreign intelligence requirement on the FBI. Foreign intelligence: collection 
by the FBI is based upon requirements. 


(U//FOUG) Foreign intelligence requirements issued by one of the parlies listed above and 
accepted by the FBI Dl will fall into one of two categories: (i) those that address national 
security issues that are within the FBI’s core national security mission (FBI collection 
requirements): and (ii) information relating to the capabilities, intentions, or activities of foreign 
governments or dements thereof foreign organizations, foreign persons, or international 
terrorists which arc not within the FBI’s core national security mission (PFI Collection 
Requirements). 

iL FOL'O) Requirements which fall into the first category may correspond to FBI national 
collection requirements as defined in DIOG Section 5, 12. FBI national collection requirements 
are addressed in properly authorized Assessments (See DIOG Section 5.6.3. 5) or Predicated 
Investigations, (See the Intelligence Policy Implementation Guide (IPG) for specific 
requirements. ) 


l FOUO) Requirements which fall into the second category are know n as Positive Foreign 
Intelligence ( PFI) Collection Requirements and may only be addressed under the authorities 
described in this section. Type 6 Assessments opened for the purpose of determining whether a 
field office has the ability to collect on a PFI Collection Requirement (Sec DIOG Section 
5 6J.5 ) + and Full Investigations opened for the specific purpose of collecting on PFI Collection 
Requirements must be predicated on an established PKE Collection Requirement that has been 
accepted and approved by the FBII1Q Directorate of Intelligence (Dl) - Domain Collection and 
. ME NT Management Section (DC I IMS), Domain Collection Program Management Unit 
(PCPMU) UC, Preliminary Investigations for the sole purpose of collecting on PFI requirements 
; not authorized by the AGG-Dom, A Full PFI Investigation to collect on PFI Collection 
rements must be opened in the 1309-814 or 816 classification files. A Full PFI Investigation 
for the intended purpose of collecting on PFS requirements must be approved by the 
DCPMU Unit Chief" (UC). A Full PFI Investigation cannot he opened on oral authority. 


F' }\ O) ’'The general guidance of the FBI’s foreign intelligence toll ecti on activities by DN1- 
■r - ,:ed requirements does not limit the FBI’s authority to conduct investigations supportable 
■ ■ . n ists of its other authorities — to investigate federal crimes and threats to the national 
m areas in which the information sought also falls under the definition of foreign 
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9 [U) FOREIGN INTELLIGENCE 




9.1 (U) Overview 

EU> Kn reign Intelligence defined : Foreign intelligence is ‘'"information relating to the 
capabilities, intentions* or activities, of foreign governments or elements thereof, foreign 
organizations, or foreign persons, or international terrorists’’ A '"Foreign Intelligence 
Requirement'’' is a collection requirement issued under the authority of the Director of National 
intelligence (DN1) and accepted by the FBI Directorate of Intelligence (DJf Additionally* the 
President, a United States Intelligence Community (USIC) office designated by the President, the 
Attorney General, Deputy Attorney General, or other designated Department of Justice (DQJ) 
official may levy a foreign intelligence requirement on the FBI, Foreign intelligence collection 
by the FBI is based upon requirements, 

(U//FOUQ) Foreign intelligence requirements issued by one of the parties listed above and 
accepted by the FBI D1 will fall into one of two categories: (it those (hat address national 
security issues that are within the FBI's core national security mission ( FBI collection 
requirements); and (ii) information relating to the capabilities, intentions, or activities of foreign 
governments or elements thereof foreign organizations, foreign persons, or international 
terrorists which arc not within the FBI's core national security mission (PFl Collection 
Requirements). 

(UAFOUO) Requirements which fall into the first category may correspond to FBI national 
collection requirements as defined in DIOG Section 5 A 2. FBI national collection requirements 
are addressed in property authorized Assessments (See DIOG Section 5,6. 3. 5) or Predicated 
Investigations, (See the Intelligence Policy Implementation Guide (IPG) for specific 
requirements,) 

(U//FOUO) Requirements which fall into the second category are known as Positive Foreign 
Intelligence (PFl) Collection Requirements and may only be addressed under the authorities 
described in this section, Type 6 Assessments opened for the purpose of determining whether a 
field office has the ability to collect on a PFl Collection Requirement (See DIOG Section 
5.6.3. 5), and Full Investigations opened for the specific purpose of collecting on PFl Collection 
Requirements must be predicated on an established PFl Collection Requirement that has been 
accepted and approved by the FB1HQ Directorate of Intelligence (Dl) - Domain Collection and 
HUMINT Management Section (DCHMS), Domain Collection Program Management Unit 
(DCPMU) UC, Preliminary Investigations for the sole purpose of collecting on PFl requirements 
are not authorized by the AGG-Dom. A Full PFl Investigation to collect or PFT Collection 
Requirements must be opened in the 809-814 or 8 16 classification files. A Full PFl Investigation 
opened for the intended purpose of collecting on PFl requirements must be approved by the 
DCPMU Unit ©lief (UC), A Full PFl Investigation cannot be opened on oral authority. 

L FOUO) 'The general guidance of the FBI's foreign intelligence collection activities by DNl- 
authorized requirements does not limit the FBI’s authority to conduct investigations supportable 

n. the basis of its other authorities to investigate federal crimes and threats to the national 
security- in areas in which the information sought also falls under the definition of foreign 
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intelligence." (Attorney General s Guidelines for Domestic FBI Operations (AGG-Dom), 
Introduction A3) Accordingly, the AGG-Dom authorizes the collection of foreign intelligence 
incidental to predicated criminal, counterintelligence, counterterrorism, cyber, and weapons of 
mass destruction investigations. Incidental collection described above must be documented in the 
H 1 5 1 field office classification file. Sec DIOG Sections 5.2 and 7.5. A and B. 

(U//FOUO) A Full PFI Investigation can be opened based solely on a PFI Collection 
Requirement. The authorized purpose (the PFI Collection requirement) must exist and have been 
accepted by the FBI. 

(LI) Examples : 

A) (U//FOUO) The DKIC seeks information regarding the intentions of the Republic of X to 
strengthen its military in the wake ofhostile actions by the Government of Y. If FB1MQ DE 
accepts this requirement as a PFI Collection Requirement* FB1HQ 1>I will approve a file in the 
809-8 1 4 or 8 16 investigative classification series. Any field office which has the capacity to 
respond to this requirement must operate under the 809-tf (4 or 81 6 series file. This may he 
opened as a Full Investigation if authorized by DCPMLL 

B) (U//FOLK>) The USJC seeks information regarding, the Government of Y s intentions vis-a-vis 
the Republic nfX, FBI HQ D3 accepts this requirement as a E’FI Collection Requirement and 
approves the opening of a file in the S09-8 14 or 8 16 investigative classification series, As pari 
of an existing counterintelligence investigation, an operational squad \m technical coverage 
that is yielding information pertinent to this requirement. The operational squad should share 
relevant foreign intelligence collected during the course of its investigation with the Field 
Intelligence Group (FIG), which should analyze and disseminate that foreign intelligence 
information and document its handling of the intelligence in the appropriate H09-K14or 816 
classification file. 

(U//FOUO) FBIHQ Dl provides specific guidance in its IPG regarding FBI national collection 
requirements* FBI field office collection requirements, and PFI requirements, 

9.2 (U) Purpose and Scope 

(U//FOUO) As stated above, foreign intelligence is "information relating to the capabilities, 
intentions* or activities of foreign governments or elements thereof, foreign organizations, or 
foreign persons, or international terrorists." The collection of positive foreign intelligence 
extends the sphere of the FBI’s in formation -gathering activities beyond federal crimes and 
threats to the national security and permits the FBI to seek information regarding a broader range 
of matters relating to foreign powers, organizations, or persons that may be of interest to the 
conduct of ihe United States* foreign affairs. (AGG-Dom, Introduction A3) 

(U//FOUO) While employees may collect positive foreign intelligence in already opened 
Assessments and Predicated Investigations (incidental collection), this section is focused on the 
policies and procedures that govern opening and managing Full Investigations for the specific 
purpose of col leering on PFI Collection Requirements published by the Dt. DEQG Section 
5.63.4 governs opening and managing Type 6 Assessments. 
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93 (U) Civil Liberties and Privacy 

(U) Because the authority to collect positive foreign intelligence pursuant to PFI Collection 
Requirements enables the FBI to obtain information pertinent to the United States' conduct of its 
foreign affairs, even if that information is not related to criminal activity or threats to the national 
security, the information collected may concern lawful activities. Accordingly, the FBI must 
operate openly and cun sensually with an |JS Person (USPER), to the extent practicable, when 
eollccting positive foreign intelligence. (AGG-Dom, Introduction A. 3) 

(U) The pursuit of legitimate investigative goals without infringing upon the exercise of 
constitutional freedoms is a challenge that the FBI meets through the application of sound 
judgment and discretion, 

(U) No investigative activity* including the collection of positive foreign intelligence pursuant to 
PFI Collection Requirements, may be taken solely on the basis of activities that are protected by 
the First Amendment or on the race, ethnicity* national origin or religion of the subject ora 
combination of only those factors. In order to take action intentionally to collect positive foreign 
intelligence, an FBI employee must open a Full Investigation that is predicated on a PFI 
requirement. 

(U) The AGG-Dom present investigators w ith a number of authorized investigative methods in 
the conduct ofa Full Investigation to collect positive foreign intelligence. Considering the effect 
on the privacy and civil liberties of individuals and the potential to damage the reputation of 
Individuals, some uf these investigative methods are more intrusive than others. The least 
intrusive method if reasonable based upon the circumstances of the investigation is to be used, 
but the FB! must not hesitate to use any lawful method consistent with the AGG-Dom, For 
further explanation of the least intrusive method refer to DIOG Section 4. 

(UJ Moreover, when collecting positive foreign intelligence, as part of a Full Investigation 
predicated on a PFI requirement, the FBI must operate openly and consensual! y with an USPFR, 
to the extent practicable. 

(If) By emphasizing the use of the least intrusive means to collect positive foreign intelligence 
and by emphasizing the need to operate openly and consensual I y with an USPER* to the extent 
practicable, FBI employees tan effectively execute their duties while mitigating the potential 
negative impact on the privacy and civil liberties of all people encountered as part of the 
collection. This principle is not intended to discourage FBI employees from seeking relevant and 
necessary positive foreign intelligence, but rather is intended to make sure FBI employees 
choose the least intrusive but still reasonable based upon the circumstances of the investigation 
from the available options to obtain the information. 

(L r ) The Privacy Act may not exempt from disclosure information the FBI collects during 
Positive Foreign Intelligence Assessments and investigations to qualified U,S, citizens or 
lawfully admitted permanent residents when personally identifying information about such 
persons resides in those fries. FBI employees should therefore be particularly vigilant about 
properly classifying any such information and avoiding unnecessary references to, and I he 
documentation of. identifying information about U.S. citizens and lawfully admitted permanent 
residents in Positive Foreign Intelligence files. 
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9.4 (U) Legal Authority 

(U) The FBI’s legal authority to collect positive foreign intelligence derives from a mixture of 
administrative and statutory sources. (See E.O. 12333: 50 U.S.C. 401 et seq.: 50 U.S.C §§ 

ISO I ct set],; 2S U.S.C. § 532 note [incorporates the Intelligence Reform and Terrorism 
Protection Act. PL. 108458 §§ 2001-2003]}. In collecting positive foreign intelligence, the FBI 
wilt be guided by collection requirements issued under the authority of the DNE T including the 
National Intelligence Priorities Framework and the National Human Intelligence (HUM INT) 
Collection Directives, or any successor directives issued under the authority of the DNl and 
accepted by FBJHQ DI (PFI Collection Requirements). 

9, 4h 1 (U) Full Investiga tion Activities 

(U//FOUO) As discussed in Section 7 of the DIGG. the AGG-Dom cites three predication 
circumstances warranting a Full Investigation, one of which specifically applies to the collection 
of positive foreign intelligence: “The Full Investigation may obtain foreign intelligence that is 
responsive to a [positive] foreign intelligence requirement." 

(U/VFOUO) A PFI investigation may only be commenced if the Office of the DNI has levied a 
foreign intelligence collection requirement on the FBI and the Dl has accepted the requirement 
as one to which the FBI will endeavor to respond io as part of its PFI Program (i.e,, PFI 
Collection Requirements). The FBI is authorized to open a Full Investigation to collect on a 
US EC’ intelligence requirement only if it has been accepted and designated by FBI HQ Dl as a PFI 
Collection Requirement. 

9.5 (U) General Requirements and FBI HQ Standards for Approving the 
Opening of Positive Foreign Intelligence Investigations 

9 . 5.1 (U) General Requiremen ts and Program Responsibilities 

(U//FOUO) The DCHMS is responsible for promulgating FBI policy and oversight of the 
Foreign Intelligence Collection Program EFICF). DCHMS, DCPMU will provide notice to the 
DOJ NSD upon the opening of a positive foreign intelligence Full Investigation To ensure that 
all positive foreign intelligence collection is focused on authorized PFI Collection Requirements, 
only DCPMU may approve the opening of a Full Investigation (809-814 or 8 16 elassillcations). 
Only personnel assigned to FlGs may conduct PFI Full Investigations. Field offices must 
request, by EC to the DCPMU Unit Chief (UC) approval to open Full Investigations to collect on 
PFI Collection Requirements. 

(U//FOIJO) If at the time of the opening, oral anytime thereafter, the PFI Full Investigation 
involves a Sensitive Investigative matter (SIM), the tille/'eaption must contain the words 
"Sensitive Investigative Matter/'’ 

(UV/FOUO) The DIOG prohibits the use of control files or administrative files to document 
investigative activity. (See DIOG Appendix J) 
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9S, 2 (U) Sta ndards For Opening a Full Investiga tion to Collect Positive 

Foreign Intelligence 

U FOUQ.) Before opening or approving a Full Investigation for the purpose of collecting PFI, 
the approving official must determine whether: 

A) (U/'FOUO) The FBI Dl has established an PFI Collection Requirement for opening a Full 
Investigation; 

B) (UATOUO) The Full Investigation is not based solely on the exercise of First Amendment 
activities or on the race, ethnicity, national origin or religion of the subject or a combination of 
only such factors; and 

C) (UAFQUO) The Full Investigation is an appropriate use of personnel and financial resources, 

■ L FOUO) Additional policies regarding Predicated Investigation involving any foreign 
ambassador, foreign official, foreign student or exchange visitor, protected persons or premises 
*> a subject may be found in DTOG Appendix G [No Foreign Policy Objection (NFTO)J, 

9.6 f U ) Open i ng Doc u m entatiqn , Ap pho v a l, Effective Date, Am F i le 

Review 

9. 6. 1 (U) Opening by a Field Office Wi th FBI HQ DCPMU UC Appro va l or 

Opening by FBI HQ 

FOUO) The predication fora Full PFI Investigation must be documented in the opening 
; cv ronie communication (EC). A Full PFI Investigation may not be opened on oral authority, 

9 ,6. 1 , 1 f U] Apf bo v al to Open a Full PFI I n vesti g ation 

U FOUO) Opened hv a Field Office or Oncned by FBI HO ; DCPMU UC will approve the 
. peningofa Full Investigation based on PFI Collection Requirements. 

9 6. t. hi (Uj Effective Da te 

FOUO) Opened hv a Field Office nr Opened hv FBIHO i The effective date of the Full 
i-\ estimation is the dale the DCPMU UC approves the EC by electronic signature/date 
gmcra led by Sentinel or by handwriting this/her initials and date on the EC. 

9 6.1.2 (U) Approval to Open a Full PFI Investigation Involving a Sensitive 

Investigative Matter (SIM) 

L FOUO} The opening of a Full PFI Investigation involving a SIM: 

9 6 1 . 2 . 1 (U) S/M Full PFI Investiga tion Opened by a Field Office 

FOUO} The opening in a field office of u Full Investigation to collect PFI involving a 
>7V must have prior Chief Division Counsel (CDC) review, and approval by the Special 
n Charge (SAC) and the DCHMS Section Chief (SC), The notice must identify all 
SIMs involved in the investigation, and include the caption on the opening 
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communication - “Sensitive Investigative Matter." The DCHMS must notify. in writing, the 
appropriate NSD official as soon as practicable, but no later than 30 calendar days after the 
opening of the investigation, See the classified provisions in DIQG Appendix G for additional 
notice requirements. 

(U//FOUG) If a SIM arises after the opening of a Full Investigation to collect PFI, the 
investigation may continue, but the matter must be reviewed by theCDC or OGC and 
approved by the SAC and DCHMS $C T as soon as practicable, but not more than five {5) 
business days thereafter to continue the investigation. Notice must be provided to DOJ as 
indicated above. 

9. 6. 1.2.2 (U) SIM Full PFI Investica tion Opened by FBfHQ 

(U//FOUG) The opening by FBI HQ of a Full Investigation to collect PFI involving a SIM 
must have prior OGC review, and approval by the DCHMS SC. The notice must identify ail 
known SIMs involved in the investigation, and include the caption on the opening 
communication “Sensitive Investigative Matter," The DCHMS must notify, in writing, the 
appropriate NSD official as soon as practicable, but no Eater than 30 calendar days after the 
opening of the investigation. See the classified provisions in DIOG Appendix G for additional 
notice requirements. 

(U//FOUO) If a SIM arises after the opening of a Full Investigation to collect PFI, the 
Investigation may continue, but the matter must be reviewed by the OGC and approved by the 
DCITMS SC, as soon as practicable . but not more than five (5) business days thereafter to 
continue the investigation. Notice must be provided to DOI as indicated above. 

9.6. 1 . 2.3 (Uj Effective Da te 

(U//FOUO) Queued bv u Field Office ur Opened b\ FBI HO : The effective date of the Full 
Investigation involving a SIM is the date the DCHMS SC approves the EC by electronic 
signaturcvdatc generated by Sentinel or by handwriting their initials and date on the EC. 

9.6.2 (U) Notice to DOJ 

9.6.2.1 [U] For a Fuu PFI Investigation 

(U//FOUO) Notice to DOJ is required when a Full Investigation to collect information 
responsive to a foreign intelligence requirement is opened. Notice must be forwarded from 
DCHMS. DCPMU to the DOJ NSD as soon as practicable but no later than 30 calendar days 
after the opening of the investigation. {AGG-Dom, Fart II.B.5) For Full PFf Investigations 
that are a SIM, sec DKXj Section 9 6,1 .2 above, 

9 . 6.3 (U) Duration 

(U//FOUO) A Full PFI Investigation may continue for as long as necessary until the requirement 
is met, or the investigation concludes they eannot satisfy the requirement. 
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9,6 A (U) File Review 

9.6.4. 1 (UJ Full I h vestil; ations 

(U//FOUO) Supervisory file reviews of a Full PFI Investigation must be conducted at least 
every 90 days in accordance with DIOG Section 3.4.4. File reviews for probationary agents 
must be conducted a! least every 60-days. 

9. 6. 5 (UJ Annual L etterhead Memorandum 

9.6. 5. 1 (UJ Field Offi ce Resfonsi bi lity 

(U//FOUG) All FIGs must submit an annual report on each Full PFI Investigation thaL was 
open for any period of time dating the previous calendar year. This report is due to FBIHQ 
DCHMS no later than January 30lb of the calendar year following, each year during which a 
Full Investigation is open and must include the following: 

A) (IV/FOUQ) The PFI requirement to which the investigation was responding; 

B) (LV/FOUO) All methods of collection used; 

C) C LV/FOUO) All Sensitive investigative Matters encountered; 

D) (LV/FOUO) A list of at] HRs by number issued based on information collected during the 
investigation; 

E) (U//FOUO) A summary of the PFI collected; and 

F) (U//FOUO) The date the Full Investigation was opened and. if applicable, the dale it was 
closed. 

{LtZ/FGUO) These reports should bo submitted by EC. The EC must be uploaded into ACS as 
designated in the IPG. 

9.6.5.2 (U) FBIHQ Responsibility 

(U//FOUO) DCHMS must compile data from each field office regarding the scope and nature 
of the prior year's PFI collection program . No later than April I s * of each year, the DCHMS 
must submit a comprehensive report of all activity described above to DQJ NSD. The report 
must include the following information: 

A) (UVFQL’G) The PFI requirement to which the investigations were responding; 

R) (U//FOUO) All Sensitive Investigative Matters encountered: and 
C) (U//FOUO) The date all Full Investigation were opened and closed (i I applicable). 
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9.7 (0) Standards for Opening or Approving the Use of an Authorized 
Investigative Method in a Full Positive Foreign Intelligence 
Investigation 

(U//FOUO) Prior to opening or approving the use of an investigative method in a Full 
investigation For the purpose of colkcting positive Foreign intelligence pursuant to a PFI 
Collection Requirement, an FBI employee or approving official must determine whether; 

A) (U//FQUO) The use of the particular investigative method likely to further the authorised 

purpose of the Full Investigation; 

EJ) (LV/FOUO) The investigative method selected is the least intrusive method, if reasonable 
based upon the circumstances of the investigation and, if taken relative to an US person 
(USPER), the method involves open and consensual activities, to the extent practicable;, 

C) (W'FOUQ) Open and consensual activity would likely be successful (if it would* covert non- 
consensual contact with an tJSPEIt may not be approved); and 

D) (U//FOUO) The investigative method is an appropriate use of personnel and financial 
resources. 

9.8 (U] Authorized Investigative Methods in a Full Positive Foreign 
Intelligence Investigation 


(U//FOUO) Prior to opening or approving the use of an investigative method, an FBI employee 
and approving official must -apply the standards- as provided in DIOG Section 9,7, With the 
exceptions noted below, all lawful methods may be used during a Full Investigation to collect 
positive foreign intelligence pursuant to PF1 Collection Requirements. If actions are to be taken 
w ith respect to an USPER. the method used must be open and consensual, to the extent 
practicable. 

(U| Sec DIOG Section I S fora complete description of the following methods that may be used 
in Full PFI Investigations. The methods am: 


A) (U ) Public information, (See Section JjfJL 1 ) 

B'l (U) Records or information - FBI and DGJ. (See Section IH.5.2 ) 

C) (U) Records or information - Other federal, slate, local, tribal, or foreign government agency. 
(See Section IS .5.3 ) 

D) (LI) On-line services and resources. (See Section IS. 5.4 ) 

E) (U) CHS use and recruitment, (See Section IS, 5. 5 ) 

F) (U) Interview or request informal ion from the public or private entities. (See Section I K. 5.6 ) 

G) (U) Information voluntarily provided by governmental or private entities. (Sec Section 18.5.7) 
1 1) (U) Physical Surveillance (mu requiring a court order). (See Section IK.5.8 ) 

I) (U) Trash Covers ( Searches that do not require a warrani or court order). (Section I H..6. 1 T) 

J) (U) Consensual monitoring of communications, including electronic communications, 

(Section 1&.6-1) 
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(U//FOUO) For those state, local and tribal governments that do not sanction or provide a law 
enforcement exception available to the FBI for one-party consent recording of 
communications with persons w'iihin their jurisdiction, the SAC must approve the consensual 
monitoring of communications as an Otherwise Illegal Activity.' (Q1A). Prior to the SAC 
authorising the OIA, one-party consent must be acquired. The SAC may delegate the OtA 
approval authority to an Assistant Special Agcnt-in-Chargc (ASAC) or Supervisory Special 
Agent (SSA). 

(U//FOUO) See the classified provisions in Appendix G for additional information. 

K) (U) Intercepting the communications of a computer trespasser. (Section IKA2) 

L) (U) Closed -circuit television/video surveillance* direction finders, and other monitoring 
devices. (Section 1S.6.33 

M) (U> Polygraph examinations. (Section lft.6.1 I ) 

N) (U> Undercover Operations (Section I SA 13 ) 

O) (U//FOUO) Pen registers and irap/lraee devices for non-USPERs using FISA. (See Section 
I ft. 6.9 1 

P) (U> Electronic surveillance using FISA or E.O. 12333. (See Section I ft 7.3 1 

0) (U//FOUO) Searches, with a warrant or couri order using FISA or E.O. 123 33 § 2.5, The 
D1GG classified Appendix G provides additional information regarding certain searches, 
(ACKl-Doni, Part VAJ2)(S« Section 18.7.1 ) 

R) (U) FISA Title VII - Acquisition of positive foreign intelligence information. (See Section 
lft-7.3 1 

S) H-V/FOUO) FISA Order for business records (for records relating to a non-US PER only). (See 
Section 1 6,6.7 1 

9.9 [U) Investigative Methods Not Authorized During A Full Positive 

Foreign Intelligence Investigation 

(U 'FOUO) The following investigative methods arc not permitted to be used for the purpose of 
collecting positive foreign intelligence pursuant to PFI Collection Requirements: 

A) (U//P0UO) National Security Letters (15 U.S.C. I68lu, 1681 v; 18 U.S.C. § 27W: 12 
U.S.C- 1 34i[a][5][AJ: 50 U.S.C, § 436). (Section Ift^ft ) 

B) (U//FOUO) FISA Order for busing records (for records relating to an USPER), (Section 
18.6,71 

C) (U//FOUO) Pen registers and trap, ''trace devices in conformity wilh FISA (on an USPER). 
(Section 18.6.9 1 

D) (U//FOUO) Pen registers and trap/i race devices in conformity with chapter 206 ofl ft U.S.C. 
§§ 3121-3127, t Section 18,6.93 

E) (U//FOUO) Mail covers. (Section 18.6. 10 ) 

F) tU.'/FOUO) Grand jury subpoenas, (Section IS. 6.5 ) 

G) (U//FOUO) Administrative subpoenas, t Section 1 8.6.4) 
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H) CU//FOUO) Stored wire and electronic communications and transactional records. (Section 
ISAS ) 

9.10 (II) Sensitive Investigative Matters (SIM) in a Full Positive Foreign 
Intelligence Investigation 

(U/FQUO) The title/caption of the opening or subsequent EC fora Full Investigation for the 
collection of PFI involving a SIM must contain the words '"Sensitive Investigative Matter." 

DIOG Section 10 contains the required approval authorities, and factors in be considered relative 
to a Predicated Investigation involving a SIM. 

9.10.1 ( U) Sensitive Investwa tive Ma tters (SIM ) 

(U//FOUO) A SIM is an investigative matter involving ihe activities of a domestic public official 
or domestic political candidate (involving corruption ora threat to the national security), 
religious or domestic political organisation or individual prominent in such an organization, or 
news media, an academic nexus, or any other matter which., in the judgment of the official 
authorizing an investigation, should be brought to the attention of FBIHQ and other LX)J 
officials. (AGG-Dom, Part V1LN.) As a matter of FBI policy, "judgment" means that the 
decision of the authorizing official is discretionary. DIOG Section 10 and/or the classified 
provisions in DIOG Appendix G define domestic public official, political candidate, religious or 
political organization or individual prominent in such an organization, and news media, 

(U//FOUO) All Full PFI Investigations involving a SIM must be reviewed by the CDC/OGC 
approved by the SAC and the DCHMS SC. 

9.10.2 (U) Academic Nexus 

(U//FQUO) As a matter of FBI policy, an investigative activity having an "academic nexus” is 
considered a SIM if: 

A) (U//TQUO) the investigative activity involves matters related lo the responsibilities of an 
administrator or faculty member employed by any college or university that is located inside 
the United Slates, provided the matter under investigation is related to the individual's 
position at the institution; or 

B) (Ih'/FOUO) the matter involves any student association recognized and approved by the 
college or university at which the student association at issue is located, and the college or 
university is located inside the United States. 

(U//FOUO) The sensitivity related lo an academic institution arises from the American tradition 
of "academic freedom" (eg,, an atmosphere in which students and faculty are free to express 
unorthodox ideas and views and to challenge conventional thought without fear of repercussion). 
Academic freedom does not moan, however, that academic institutions are off limits to FBI 
investigators in pursuit of information or individuals of legitimate investigative interest. 

(U//FGUO) For matters not considered a SIM even though there is an academic nexus, see the 
classified provisions in DIOG Appendix G. 
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9.11 (U) Retention of Information 

(U//FOUO) DCHMS must maintain a database or records systems that permits the prompt 
retrieval of the status of each positive foreign intelligence collection Full Investigation (open or 
dosed), the dates of open Eng and closing, and the basis for the Full Investigation. 

9.12 (U//FQUO) Standards for Approving the Closing of a Full Positive 
Foreign Intelligence Investigation 

9.12.1 (U) Standards 

(U /’FOUO) At the conclusion of a Full positive foreign intelligence Investigation, each of the 
following items must be documented in the dosing communication (EC and/or LHM): 

A) (U//FQUO) A summary 1 of the results of the investigation; 

B) (U//FOUQ) Whether logical and reasonable investigation was completed (i,e. the matter 
acquired the positive foreign intelligence information sought); 

C) (U//FOUO) Whether all investigative methods initiated have been completed and/or 
discontinued; 

D) (U//F0UO) Whether all leads set have been completed and/or discontinued; 

E) (U//FOUO) Whether all evidence has been returned, destroyed or retained in, accordance wish 
evidence policy; and 

F) ( U//FOUO) A summary statement of the basis on which the foreign intelligence investigation 
will be closed, and the selection of C4 for Administrative Closing, which includes: 

1 ) (U//FOUO) No further investigation is warranted and/or leads have heen exhausted; 

2) (U//FOUO) Investigation assigned a new file number; or 

3) (U//FOUG) Investigation consolidated into a new file number or an existing file number. 

9. 1 2.2 (U) Approval Requirements 

I FOUO) The appropriate dosing supervisor described below must review and approve the 
dosing communication (as described in Section 9.1 2.1) so ensure it contains the above-required 
information and sufficient details of the investigation on which to base a decision to close the 
foreign intelligence investigation. The dosing supervisor must note on the dosing document “C" 
for close), the closing status 4 (e,g. T C-4). and the dosing date. The appropriate closing 
superv isors are: 


9,12.2,1 (U] Opened by a Field Office with FBIHQ Approval 

i l r FOUO) Closing a Full PFI Investigation opened by a field office requires a written 
request from the FIG SSA and the approval of the DCPMU UC, 
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9J2.2.2 (U) Opened gv FBIHQ 

(U//FOUO) Closing a Full PFI Investigation opened by FB1HQ requires approval from the 
DCPMU UC and notification to the appropriate field office. 

9.12.2.3 (U) SIM Opened bv a Field Office with FBI HQ Approval 

(U//FOUO) Closing a PFI Full Investigation opened by a field office involving a SIM requires 
approval from the SAC and the DCHMS SC. 

9.12.2.4 (U) SIM Opened by FBI I IQ 

(U//FOU0) Closing a PFI Full Investigation opened by JFBIMQ involving a SIM requires 
approval from the DCHMS SC, and written notification to the appropriate field office. 

9,13 (II) Other Program Specific Investigation Requirements 

(U//FGUO) To facilitate compliance with investigative program-specific requirements, the FBI 
employee should consult the relevant division’s PG to ascertain any program-specific 
requirements. However, FBIHQ division PGs may not contradict, alter or otherwise modify the 
standards established in the DIQG, 


Verstfln Dated: 
October IS, 2 CM 1 


9-32 

UNCLASSIFIED FOR OFFICIAL USE ONLY 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic In vcstigations and Operations Guide 5 1 0 

to (U//FOUO) SENSITIVE INVESTIGATIVE MATTER (SIM) AND 
SENSITIVE OPERATIONS REVIEW COMMITTEE (SORC) 


10.1 [U] Sensitive Investigative Matters (SIM) 

10.1.1 (U) Overview 

(U) Certain investigative matters should be brought to the attention of FBI management and 
Department of Justice (DOJ) officials because of the possibility of public notoriety and 
sensitivity. Accordingly, Assessments and Predicated Investigations involving “sensitive 
investigative matters" have speeial approval and reporting requirements. 

10 A. 2 (if) Purpose, Scope, a m Defimtions 

10.1.2.1 (U) Dlnm nun of Sensitive Investigative Maiters(SIM) 

| (J/FOUO) A sensitive investigative matter (SIM) is defined as an investigative matter 
involving the activities of a domestic public official or domestic political candidate (involving 
corruption or a threat to the national security ) T a religions or domestic political organization or 
individual prominent in such an organization, or the news media; an investigative matter 
having an academic nexus; or any other matter which, in the judgment of the official 
authorizing the investigation, should be brought to the attention of FBI Headquarters {FBI HQ) 
and other DOJ officials. (Attorney General's Guidelines for Domestic FBI Operations (AGG- 
Dom), Part Vll.N.) As a matter of FBI policy, “judgment” means that the decision of the 
authorizing official is discretionary. 

(U//FOUQ) The phrase “investigative matter involving the activities of” is intended to focus 
on the behaviors and/or activities of the subject, target, or subject matter of the Assessment or 
Predicated Investigation. The phrase is generally not intended to include a witness or victim in 
the Assessment or Predicated Investigation. This definition does not, however, prohibit a 
determi nation that the status, involvement, or impact on a particular witness or victim would 
make the Assessment or Predicated Investigation a SIM under subsection 10.1.2,2.7 below. 

10.1.2.2 [U] Defi N moNS /D escriptions of SIM Officials and Entities 

(U) Descriptions for each of the officials and entities contained in the SIM definition are as 
follows: 


1 0. 1.2.2, 1 (U) Domestic Public Officia l 

(U/FOUO) A domestic public official is an elected official or an appointed official serving in 
a judicial, legislative, management, or executive-level position in a Federal, state, local, or 
tribal government entity or political subdivision thereof. A matter involving a domestic public 
official is a SIM if the Assessment or Predicated Investigation involves corruption or a threat 
to the national security. 
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(U//FOUO) This definition is intended to exclude lower level positions and most line 
positions, such as a patrol officer or office secretary from the SIM category, but it docs 
include supervisory personnel (e.g., police Sergeant or Lieutenant). The SIM definition also 
eliminates the “position of trust" language. 

10.1.2.2.2 (U) Domestic Political Candidate 

(Ui FOUO) A domestic political candidate is an individual who is seeking election to, or 
nomination for election to. or who has authorized others to explore on his or her behalf the 
possibility of election to an office in a federal, state, local or tribal governmental entity or 
political subdivision thereof. As with domestic public officials, a matter involving a political 
candidate is a SEM if the Assessment or Predicated Investigation involves corruption or a 
threat to the national security. 

10.1 .2.23 { V) Domestic Pol itica i Organize tion dr Individual Prominent in such an 

Organization 

{Ifi'FOUO) Domestic political organization includes political parties at any level, political 
action groups or committees, or committees or groups formed for the purpose of electing an 
individual to public office or to advocate or educate the public concerning a political or social 
issue, If the Assessment or Predicated Investigation concerns a person prominent in such an 
organization, but not the organization itself, it must still be treated as a SIM. 

I ft 1.2.2. 4 (If) Reugious Organization or Individual Prominent in such an Qrga niza tion 

(U//FQUO) Religious organization includes any association of persons whose purpose 
primary is worship (whether in a church, mosque, synagogue, temple, or other meeting 
location) or other entity whose principal purpose is the study or advancement oT religion. 
Religious organizations may be organized in a variety of wavs* such as an unincorporated 
association, non-profit corporation, charitable trust* or an association in fact. Ef the 
Assessment or Predicated Investigation concerns a person prominent in such an organization, 
but not the organization itself, it must still be treated as a SIM. 

10.1. 2.2.5 (U) Member of the News Media or a News Organ! za tion 

(U/FGUQ) “News media" includes pereons and organizations that gather* report, or publish 
news, whether through traditional means (e.g.. newspapers, radio, magazines, news service) 
or the on-line or wireless equivalent. A “member of the news media" is a person who gathers* 
reports, or publishes news through the news media. 

(U//FOUO) The term “News Media" also includes an entity organized and operated for the 
purpose of gathering, reporting or publishing news, The definition does not, however, include 
a person or entity who posts information or opinion on the Internet in blogs, chat rooms or 
social networking sites* such as YouTube. Facebook, or MySpace, unless that person or entity 
falls within the definition of a member of the media or a news organization under the other 
provisions w ithin this section (e.g., a national new s reporter who posts on his/her personal 
blog). 
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(U//FQUO) Examples of news media entities include television or radio stations broadcasting 
to the public at large and publishers of newspapers or periodicals that make their products 
available to the public at large in print form or through an Internet distribution. A freelance 
journalist may be considered to be a member of the media if the journalist has a contract with 
the news entity or has a history of publishing content, Publishing a newsletter or operating a 
website does not by itself qualify an individual aw a member of the media. Businesses, law 
firms, and trade associations offer newsletters or have websites; these are not considered news 
media. As the term is used in the DIOG, “news media” is not intended to include persons and 
entities that simply make information available. Instead, it is intended to apply to a person nr 
entity that gathers information of potential interest to a segment of the general public, uses 
editorial skills to turn raw materials into a distinct work, and distributes that work to an 
audience, as a journalism professional. 

( U//FOU O) If there is doubt about whether a particular person or entity should be considered 
part of the 'news media,” the doubt should be resolved in favor of considering the person or 

entity lo be the “news media .” 

(UY/FOUO) See the classified provisions in DIOG Appendix G for additional guidance on 
SIMs. 


10.1.2.2.6 (U) Academic Nexus 

(U/fFOUOJAs a matter of FBI policy, an investigative activity having an “academic nexus'' is 
a SIM if; 

A) (U//FOUO) the investigative activity involves matters related tn the responsibilities of an 
administrator or faculty member employed by any college or university that is located inside 
the United State*, provided the matter under A ssessmen f t n vestigation is related to the 
individual's position at the institution; nr 

B) (U/YFOUO) the malter involves any sludenl association recognized and approved by the 
college or university at which the student association at issue is located, and the college or 
university is located inside the United States. 

f UY/FOUO) The sensitivity related to an academic institution arises from the American 
tradition of "academic freedom” (Le., an atmosphere in which students and faculty are free to 
express unorthodox ideas and view s and to challenge conventional thought without fear of 
repercussion). Academic freedom does not mean, however, that academic institutions are off 
limits to FBI investigators in pursuit of information or individuals of legitimate investigative 
interest. 

1 U FGUO) For matters not considered a SIM even though there is an academic nexus, see the 
classified provisions in DIOG Appendix CL 

J 0. L2< 2. 7 (U) Other Ma tiers 

i L FOLIO) Any matter that in the judgment of the official authorizing an investigation should 
be brought to the attention of FB1HQ and other DOj officials is also a SIM. As a matter of 
FBI policy, “judgment" means that the decision of the authorizing official is discretionary. 
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1 0.1.3 (U) Factors to Consider When Opening or Approving an Investiga tive 
Activity Involving a SIM 

(U//FOUO) In addition to the standards for approving investigative activity in Sections 5, ft, 7. N 
and 9, the following factors should be considered by (i) the FBI employee who seeks to open an 
Assessment or Predicated Investigation involving a SIM, as well as by the (ii> Chief Division 
Counsel (CDO or Office of the General Counsel (OGC) w hen rev iew ing such matters, and (iii) 
the approving official when determining w hether the Assessment or Predicated Investigation 
involving a SIM should be authorized: 

A) (LLYFOUG) Seriousness/severily of the violation/ threat; 

B) (U//FQUO) Significance of the i nformation sought to the violaiion/threai; 

C) (U'/TQUO) Probability that the proposed course of action will be successful; 

D) (Uf/FOlIO) Risk of public exposure, and if there is such a risk, the adverse impact or the 
perception of the adverse impact on civil liberties and public confidence: and 

E) (LWFQUQ) Risk to the national security or the public welfare i f the proposed course of action 
is not approved ( i.e., risk of doing nothing). 

(U/^FOUO) In the context of a SIM* particular care should be taken when considering whether 
the planned course of action is the least intrusive method if reasonable based upon the 
circumstances of the investigation. 

10.1.4 (U) Opening Documenta tiqn. Appro val, No tice , and Change in SIM 
Status 

(U//FOUO) If at the lime of the opening, or ai anytime thereafter, the Assessment involves a 
SIM, the title/eaplipn must con lain both the words "Assessment” and "Sensitive Investigative 
Matter,” If at the lime of the opening, or at anytime thereafter, the Predicated Investigation 
involves a SIM, the tillc/eaption must contain the words ‘"Sensitive Investigative Matter” 
Conversely, if a matter that has been designated as a SIM no longer remains a SIM due to a 
change in the facts and circumstances of the assessment or investigation, this change of 
designation must be made in the file and the caption, 

(U//FOUO) The following are required approval and notification levels For investigative 
activities involving SIMs: 

10.1.4.1 (U) Review and Approval of SIM Assessments By A Field Office 

10.1.4.1.1 (V) Type 1&2 Assessments 

(LV/FOUQ) An FBI employee may open a Type I & 2 Assessment as described in Section 
5,63,1, without prior supervisory approval, A Type* I & 2 Assessment involving a SIM must 
be reviewed by the CDC and approved by the Special A gent-in -Charge (SAC) as soon as 
practicable, but no later than five (5) business days after the opening to authorize the 
Assessment to continue, 
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10.1A.1.2 (U) Type 3 and 4 Assessments 

(U//FOUQ) An FBI employee must obtain the following review and approval to open a Type 
3 and A Assessment as a SINE CDC review and SAC approval. If a SIM arises after the 
opening of a Type 3 or 4 Assessment, the Assessment may continue, but the matter must be 
reviewed by the CDC and approved by the SAC as soon as practicable, but no later than five 
(5) business days after the SiM arises to authorize the Assessment to continue. (See DIOG 
Sections 5.6.3.14 and 5, 6.3, 3.4.) 

1 ft 1 4 , L 3 (U) Type 5 Assessments 

(U//FOUO) An FBI employee must obtain the SAC's prior approval to open a Type 5 
Assessment on a sensitive potential confidential human source (CHS). If it is determined after 
the opening of a Type 5 Assessment that the individual is a sensitive potential CHS, the 
Assessment may continue, but the matter must be approved by line SAC as soon as 
practicable, but no later than five (5) business days after ibis determination is made to 
authorize the Assessment to continue. (See DIOG Section 5.6.3.4 4.1) 

Jft 1.41 A (U) Type 6 Assessments 

(U//FQUQ) An FBI employee must obtain the following review and approval to open a Type 
6 Assessment as a SIM: CDC review, SAC approval, and Domain Collection and HUMINT 
Management Section (DCHMS) Section Chief (SC) approval. Ifthc SIM arises after the 
opening of a Typr 6 Assessment, the Assessment may continue, but the matter must be 
reviewed by the CDC and approved by the SAC and DC' H M S SC as soon as practicable, but 
no later than five (5) business days after the SIM arises to authorize the Assessment to 
continue. (Sec DIOG Section 5. 6. 3. 5. 4) 

(U//FOUO) FR1HQ must receive notice and approve all Type 6 Assessments whether or not 
they involve a SIM. 

10.1.4.2 (U) Notice for SIM Assessments by a Field Office 

(UrVFGUO) Notice for SIM Assessments — There is no requirement to notify FBI I IQ, DOJ, or 
the United States Attorney (USA) of the opening of an Assessment involving a SIM. (AGG- 
Dom, Part LJ.R.5.a) 

10.1.4.3 (u) Review and Approval of SIM predicated Investigations by a Field 
Office 

I ft J A-3 1 (U) Predica ted Investita tions Involving a SIM 

(U//FGUQ) CDC review and SAC approval. (See Sections 6.10 and 7.10) 

1 0. 1 .4.3,2 (U) Enterprise Investica tions Invol vine a SIM 

(U//FOLO) CDC reviews SAC approval, and SC approval. (See Section 8.6) 
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10.1. 4.3. 3 (U) Positive Foreign Intelligence Full Investiga tions In i solving a SIM 

(U//FOUO) CDC review, SAC approval, and DCHMS SC approval. (See DKXi Sections 9.6 
and 9.10) 

10.1,4.4 (U) Notice f oft SIM Predicated Investigations by a Field Office 

/ 0 , /, 4 4. t (U) Notice for SIM Predict ted Investiga tions 

(LWFOUO)The field office must provide Written notification {EC and a disscminablc LHM) 
to the responsible FBIHQ unit and section within 15 calendar days after the opening of a SIM 
Predicated investigation. The field office also must notify the appropriate United Slates 
Attorney's Office (US AO), in writing, unless such notification is inappropriate under the 
circumstances (eg., a public corruption investigation of a person who is personally close to 
the Unites Slates Attorney (USA), or the matter is a counterintelligence or espionage 
investigation. (See the CD PG for details concerning notice in counterintelligence and 
espionage investigations.) If notice is not provided to the US AO under the circumstances 
described above, the field office must explain those circumstances in the written notice to 
FBIHQ. The responsible FBIHQ section must notify, in writing, the appropriate DOJ 
Criminal Division official or NSD official. The notification must be made as soon as 
practicable but no laler than 30 calendar days after the opening of the investigation. The 
notice must identify all known SIMs involved in the investigation. See the classified 
provisions in DIOG Appendix G for additional notice requirements. 

(U//FOUO) If a SIM arises after the initiation of a Predicated Investigation, investigative 
activity may continue, but the matter must be reviewed by the CDC and approved by the SAC 
(and SC, if the matter is an. Enterprise Investigation or PFI Full Investigation) as soon as 
practicable, but not more than five? (5) business days thereafter to continue the investigation. 
Written notice must be furnished to the FBIHQ unit and section and to the appropriate US AO, 
DOJ Criminal and/or NSD T as specified above, 

10.1. 4. 4.2 (U) Notice for SIM Enterprise In vestigations 

(U//FOUO) Sec DIOG Section 8,6 for notice requirements. 

10.1.4.4. 3 (UJ Notice for SIM Positive Foreign Intelligence Full In vestiga tions 
(U//FGUQ) See DIOG Section 9.9 for notice requirements, 

lQ.1,4.5 (U) Review and Approval of SLM Assessments Opened bv FBIHQ 

10.L4.5A (U) Type 1&2 Assessments 

(U//FOUO) An FBI employee may open a Type I & 2 Assessment, as described in Section 
5.6.34, without prior supervisory approval. An Assessmenl involving a SIM must be 
reviewed by the OGC and approved by the SC as soon as practicable, but no later than five (5) 
business days after the opening to continue the Assessment, If a SIM arises after the initiation 
of an Assessment, investigative activity may continue, but the matter must be reviewed by the 
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OGC and approved by the SC as soon as practicable, but not more than five (5) business days 
thereafter to continue the Assessment. 

1 0. 1.4. 5.2 (U) Type 3 and 4 Assessments 

(U//FOUO) An FBI employee must obtain the following reviews and prior approvals to open 
a Type 3 or 4 SIM Assessment: OGC review and SC approval. If a SIM arises after the 
opening of a T ype 3 or 4 Assessment, the Assessment may continue, but the matter must be 
reviewed by the tXiC and approved by the SC as soon as practicable, but no later than live 
business days thereafter to continue the Assessment, 

10.1 .4. 5.3 (U) Type 5 Assessments 

(UjVFOUQ) An FBI employee must obtain his/her SC's approval to open a Type 5 
Assessment on a sensitive potential CHS. If it is determined after (he opening of a Type 5 
Assessment that the individual is a sensitive potential CHS. the Assessment may continue, but 
the matter must be approved by the employee's SC as soon as practicable, but no later than 
five (5) business days after this determination. (See Section 5.6.3.4 4. 1 ) 

1 0. 1 .4 5 A (U) Type 6 Assessments 

(U//FOUO)An FBI employee must obtain the follow ing reviews and approvals to open a Type 
6 Assessment as a SIM: OGC review and SC approval, If a SIM arises after the opening of a 
Type 6 Assessment, the Assessment may continue, but the matter must be reviewed by OGC 
and approved by the SC as soon as practicable, but no later than five (5) business days 
thereafter to continue the Assessment. (See Section 5.6J.5.4) 

10.1.4,6 (U) Notice Requirements for SIM Assessments by FBIHQ 

0J//FOUO) There is no rtquircmcnl to notify DOJ or the United Slales Attorney of the 
opening of art Assessment involving a SIM (including opening a sensitive potential CHS). 
(AGG-Dotn, Part M.B.5.a) 

10.1.4.6.1 (U) REVIEW AND A PPROVAL OF SIM PREDICA TED INVESTIGA TIONS BY FBIHQ 

1 0 . /, 4. 6,2 (V) PREDICA TED iNVESTSGA TIONS INVOLVING A SIM 

(UWFOUO) OGC review and SC approval (See DIOG Sections 6.7 t 6.10; 7.7 and 7,10) 

1 0, 1, 4. 6.3 (V) Enterprise Investiga tions Invol ving a SIM 

(U//FOUQ) OGC review and SC approval. (See DIOG Sections ft, 6) 

1 0. 1. 4. 6.4 (U) Positive Foreign Intelligence full Investiga tions In vai vmc a SIM 
(U//FOUO) OGC review and SC approval. (Sec DIOG Section 9.9) 
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1 0- 1,4. 7 ( U) Notice foh 51 M p hedi gated Investigations by FBI H Q 

1 ft i. 4, 7, X (U) Notice for SIM Predica ted Investtga tions 

(U//FOUO) TTie responsible FBIHQ seelion must provide written notification { EC and a 
dis sen unable LHMl to any appropriate field office within 15 calendar days after the opening 
of a SIM Predicated Investigation; the US AO, unless such notification is inappropriate under 
the circumstances, or the matter is a counter intelligence or espionage investigation [See the 
CP PG for details concerning notice in counterintelligence and espionage investigations.); 
and the appropriate DOJ Criminal Division official orNSD official, as soon as practicable, 
but no later than 30 calendar days after the opening of the investigation. If notice is not 
provided to the US AO under the circumstances described above. FBI HQ must explain those 
circumstances in the written notice to the field office* s) and DOJ. The notice must identify all 
known SIMs involved in the investigation, See the classified provisions in DiOG Appendix G 
for additional notice requirements. 

(U//FQUO) If a SIM arises after the initiation of a Predicated Investigation, investigative 
activity may continue, but the matter must be reviewed by OGC and approved by the SC as 
soon as practicable, but not more than five (5 ) business days thereafter to further continue the 
investigation. Written notice must be furnished to the appropriate US AO. DOJ Criminal 
Division and/or NSD, as specified above. 

1 ft L 4, Z 2 (V) Notice for SIM Enterprise Investiga tions 

(U//FOUO) See DIOG Section 8.6 for notice requirements. 

X ft L 4 , 73 (U) Notice for SIM Full Positive Foreign Intelligen ce Investiga tions 

(U//F0UQ} See DIOG Section for notice requirements, 

10.1.4.8 (U) Change in SIM Status 

(U/fFOUO) If during an Assessment or Predicated investigation it is determined that the mailer 
is no longer a SIM, an EC or similar document removing the SIM designation from the 
investigation must be tiled setting forth the change in circumstances justifying removal of the 
SIM designation. The designation of "Sensitive Investigative Matter" will no Longer be necessary 
in future communications {e.g.. will no longer appear in the caption or the synopsis seelion of an 

EC), 

1 ft 1. 4, 8, l (U) Document a tion 

(U//FOUO) The FBI employee must; 

A) (U/.TQUCb In Tru? I A 2 Awessmtfm: Submit an updated FD-71 or Guardian that removes 
the "Sensitive Investigative Matter" option on the form, the FD-71 or Guardian must be 
approved by the supervisor responsible for the Assessment reviewed by the CDC, and 
approved by the SAC. No notice to FBI HQ is required. 

H) (U//FOUO) In Tyre nttrwillb A Atf&SWm'j : 
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1 ) (UiVFOUG) Opened by a Field Office - Submil an EC (for Type 5 Assessments* an EC or a 
successor form in DELTA) thil must be approved by the supervisor responsible for the 
Assessment, reviewed by the CDC, and approved by the SAC. No notice to FBI HQ is 
required, 

2) (U/TQUO) Opened hv FBIHQ - Submit an EC that must be approved by the appropriate 
UC responsible for the Investigation* reviewed by QGC r and approved by the SC. 

C) (LV/FOLfO i Fredk aU'il In vestijintinra r 

1 ) (U.'/FGUO) Opened by a Field Office - Submit an EC that must be approved by the 
supervisor responsible for the investigation* reviewed by the CDC* and approved by the 
SAC, For Predicated Investigations* notification must be provided to the same FBIHQ 
entities ( appropriate Unit and Section) that received notice of the SIM. 

2) (U//FOUG) Opened by FB1HQ - Submit an EC that must be approved by the appropriate 
UC responsible for the investigation, reviewed by OGC. and approved by the SC. 

D) (U//FOUO) Enterprise Investigations : 

[ ) (U//FOUO) Queued by a Field Office - Submit an EC that must be approved by the 
supervisor responsible for the investigation* reviewed by the CDC, and approved by the 
SAC and the appropriate SC. 

2) (U//FOUQ) Opened hv KB [HO - Submit an EC that must be approved by the appropriate 
UC responsible for the investigation* reviewed by OGC* and approved by the SC. 

E) (UtfFOUO) Positive Full Irtves/tjjuiinns : 

1 ) (U//FOUO) Opened bv a Field Office - Submit an EC that must be approved by the 
appropriate supervisor, reviewed by the CDC. approved bv the SAC and (he appropriate D1 
UC. 

2) (U//FOUO) Opened bv FBIHQ - Submit an EC that must be approved by the appropriate 
UC responsible for the investigation, reviewed by OGC. and approved by the P! SC, 

10 , 1 . 4.9 (U) ClOSI NG SIM I NVE 5 T 1 G ATtQNS 

1 0. l A. 9.1 (U) SIM Assessments closm j by a Field Office 

A) ('U//FOUO) 7>j?e / dE 2 Assessments - These SIM Assessments must be closed on the FD-71 
or ED-7 1 a (Guardian) with approval of the Supervisor responsible for the investigation and the 
SAC, (See DIOG Section 5.6,11) 

B) (LWFOUO) Type 3, 4, an 4 '5 [Assessments - The closing EC (or successor form in DELTA for 
Type 5 Assessments) must be approved by the supervisor responsible for the investigation and 
the SAC. (See DIOG Sectiem 5.63.2,, 3, and 4) 

C) fU/VFOUO) Type 6 Assessments - The elosinn EC itnist be approved by the supervisor 
responsible for the investigation. SAC and the D| SC- (See DIOG Section 5.6-15) 

10 , 1 . 4. 9.2 (U) SIM Predica ted Imestic.a tions Closed by a Field Office 

1 1 FOUO) The closing standards, approvals and notice requirements for SIM Predicated 
Investigations, including Enterprise Investigations and foreign intelligence Full 
investigations* are specified in DIOG Sections 6.3 2; 7. 12: 8,9: and 9,12 above. 
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1 0. I , 4. 93 (U) SIM Assessments Closed by FBIHQ 

A) (IMFOUQ) 7'iw I A 2 Assessments - May be closed on the FD-7 1 or FD-7 la (Guardian) 
with the approval of the UC responsible for the investigation and his/her SC, 

B) (U//FOUO) Type 5 .j.tytf.tfJMgwA - The clnsina EC (or successor form in DELTA for 

Type 5 Assessments) must be approved by the UC responsible for the investigation and 
his/her SC. 

C) (LV/FOUO) Tvtui 6 ts.wfismettr.s, - The closing EC must be approved by the D1 L'C responsible 
for the investigation and his/her Dl SC, 

10.1.4.9.4 (U) SIM PftEDICA TED tNVESTm tiONS CLOSED BY FBIHQ 

(U//FOUO) The dosing standards, approvals and notice requirements for SIM Predicated 
Investigations, including Enterprise Investigations and Fall foreign intelligence investigations, 
arc spec Hied in DIOG Sections 6.32; 7.12; 8.9; and 9. 12 above. 

10.1.5 (U) Distinction/ Between SfM a no Sensitive Circumstance in 
Undercover Operations 

(U//FOUO) The term "sensitive investigative matter" as used in the DIOG, should not be 
confused with the term "sensitive circumstance;" as that tern is used in undercover operations. 
“Sensitive circumstance" relates to an undercover operation requiring FRTHQ approval. A 
comprehensive list of sensitive circumstances for criminal activities is contained in the Attorney 
General's Guidelines on FBI Undercover Operations and in Section 18 of the DIOG. The 
Criminal Undercover Operations Review Committee (CUORCl and the national security 
Undercover Review Committee (UC RC) must review and approve undercover operations that 
involve sensitive circumstances. The policy lor undercover operations is described in DIOG 
Section 18.6 13 . the Field Guide For Undercover and Sensitive Operations (FGUSO), National 
Security Undercover Operations Policy Implementation Guide (NSUCQPG). and the FBIHQ 
operational division program implementation guides. 

10.1.6 (U) Dis tinction Between SIM and Sensitive Undisclosed 
Participation 

(U//FOUO) The term "sensitive investigative matter/’ as used in the DIOG. should not be 
confused with "sensitive UDP (undisclosed participation).’* The rules regarding “sensitive 
investigative matter" and "sensitive UDP*' (see DIOG Section 16.2.3,5)* while similar, must be 
applied independently. The SIM designation applies to the overall investigation of which FBI 
and DQJ officials should be aware due to potential public notoriety and sensitivity. Sensitive 
UDP* on the other hand, applies to participation by employees or CHSs in lawful organizations 
(hat are designated as sensitive. Sensitive UDP can occur in either SIM or non-SIM designated 
investigations because sensitive UDP focuses on the activity (UDP) - not on the type of 
investigation in which it is taking place. Certain investigative or intelligence activity, particularly 
in situations involving academic institutions or student groups, may be covered by one or both 
these rules. The following scenarios demonstrate how these policies are to be applied: 
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10,1.6.1 [U] Scenarios 

(U/FOUO) Scenario 1 : An undercover employee (UCE) or confidential human source (CHS) 
registers as a student at a university and attends classes as part of an investigation of a 
professor who is alleged to be participating in fraud regarding a federal grant for his academic 
research. 

(U/fFQUQ) Response i ; This activity would constitute a SIM because it is an investigative 
matter involving the activities of a faculty member employed by a university located in ihe 
United States and the matter under investigation is related in his position. This would also 
involve sensitive UDP because the UCE or CHS wouid be participating in the activities of the 
academic institution in an undisclosed capacity while registering and attending classes. See 
Section 1 6.2,3, A. 

(U/FOUO) Scenario 2 : A UCE or CHS registers and attends classes at a university in order to 
assist in ihe investigation of the activities of a professor, who is the subject of an international 
terrorism investigation unrelated to his slams as a professor. 

(U//FOUO) Re\pon\c 2 : This investigation would not constitute a SIM. because the 
investigation does not involve the activities of a university administrator or faculty member 
related to his position at the institution, nor does the matter involve any student association 
recognised and approved by the institution. This matter would, however, involve a sensitive 
UDP, because the UCE or CHS would be participating in the activities of the academic 
institution in an undisclosed capacity while registering and attending classes, 

(U/FOUO) Scenario 3 : A domestic public official is alleged to have taken kickbacks from a 
local contractor for a large construction project, An employee attends a public meeting of the 
zoning board (chaired by the public official) to see if the contractor will try to meet with the 
public official. 

(L /FOUO) Response J : This investigation Would constitute a SIM because it is focusing on 
the allegations of corruption by a public official. The employee’s attendance at the public 
board meeting is not sensitive UDP, because the employee is at public event on the same 
terms and conditions as members of the genera] public. 

10.2 (U//F0U0] Sensitive Operations Review Committee 

■ l FOUO) At the request of the Director, a new joint DOJ/ FBI oversight committee, the 
Sensitive Operations Review Committee (SORC), has been established to review and monitor 
certain aspects of FBI investigative activities that arc not within the purview of other oversight 
committees, particularly with regard to Assessments, The SORC is described as follows; 

1 02* l (U) Membership a nd Staffing 

A \ (LVv'FQUO) Chair; An Executive Assistant Director from the National Security Branch (NSB) 
0t Criminal Cyber Response Services Branch |CCRSB)-depcnding on which program has the 
majority of activities being reviewed at the session, 

B) £U) Members; 
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l) (U//FOUO) KB U Assistant Directors or designated Deputy Assistant Directors for the 
CouiUeneTTorism Division, Counterintelligence Division, Cyber Division, Criminal 
Investigative Division and Directorate of Intelligence; General Counsel; Assistant Director 
of the Office of Integrity and Compliance: Assistant Director of the Inspection Division; 
and any other appropriate representative, given the issue presented to the SGRC. 

2} (U//FOU0) DOJ: .Assistant Attorneys General of the National Security Division (NSD) 
and the Criminal Division (CRM) or their senior-love I designees, and any other appropriate 
representative, given the issue being considered by the SORC. 

C) (LV/FOUQ) Advisors; The Unit Chic for a designee of the FBI’s Corporate Policy Office 
(CPO) will serve as a policy advisor to the SORC, In addition, DOT# Chief Privacy and Civil 
Liberties Officer or a designee will also serve as an advisor to the SORC, 

D) {U//FOUO) Staff; The staff of (he SORC shall be from the executive staffs of the Executive 
Assistant Directors of the MSB and the CCSB, Proposals from the MSB shall be handled by its 
executive staff; proposals from CCSB shall he handled by its executive staff The stalls will 
be collectively referred to here as “SORC Stall 1 , '’The SORC Staff ts responsible for ensuring 
that FBI and DQJ members of the SORC have the information required to perform their 
SORC duties and are kept fully informed of process developments in matters reviewed by the 
SORC. 


10.2.2 (U) Function 

(U//FOUO) The SORC will review and provide recommendations to the Director on matters 
submitted, as described below, 

10 . 2.3 (U) Review and Recommenda tion 

(U//FOUO) The SORC shall review sensitive activities in the categories described below and 
provide recommendations to the Director, who shall be the approval authority; 

A) (U//FOUO) Except for Sensitive Undisclosed Participation (sensitive UDP} conducted as part 
of an authorized Group I Undercover Operation, alt requests for authorization for a 
confidential human source (CHS| to engage in sensitive UDP or for an FBI employee to 
engage in sensitive UDP that is intended to influence the exercise of First Amendment rights 
by members of the organization or when the sensitive UDP has been judged by the Office of 
the General Counsel (OGC) as likely to inlhience the exercise of First Amendment rights by 
members of the organization, regardless of prior membership or participation status by the 
CHS or FBI employee; 

I U7FQUQ1 Notf: Criminal Undercover Operations Review Committee (CUOKCl and 
National Security Branch (NSB) Undercover Review Committee (L’CRC ) must provide notice 
to the SORC of all approved Group 1 Undercover Operations that Include sensitive UDP 

B] (U//FOUO) Any activity in the United States that is likely to have a significant impact on 
matters within the jurisdiction of another country, which is conducted without notice to that 
country and. which is not reviewed under another formal process: 

C} (U//FOUO) Any FBI Headquarters (FBJHQl-di reeled national or regional Assessment or 
intelligence collection initiative that could be perceived as ethnic or racial profiling by a 
reasonable member of the American public with knowledge of the facts and circumstances 
available or likely to be available to the public; 
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D) (UATQUO) Any proposed Assessment, Predicated Investigation, or intelligence collection.. not 
subject to review under other formal processes that, in the judgment of the official authorising 
the activity, could be perceived by a reasonable member of the American public with 
knowledge of the facts and circumstances available or likely to be available to the public as an 
unwarranted intrusion into the privacy or civil liberties of United Slates persons (USPFRsh or 
that poses a significant risk of civil liability' against the United Stales or individual federal 
employees’ or 

E) (U//FOUG} Other matters of a highly sensitive nature that will nut be reviewed through other 
review mechanisms and which, in the judgment of the official authorizing the activity, should 
he reviewed by the SGRC. For example, in criminal matters. The Attorney General Guidelines 
on FBI Undercover Activities ( ACK3-UCO). Paragraph IV. lift provides a review opportunity 
and process for sensitive investigative matters. A DGJ or FBI official authorized to refer 
matters under that paragraph should consider whether the matter is limited to the use of an 
undercover employee, CHS or cooperating subject. If so. the matter should he referred to the 
CUORC. Other matters having a broader impact on FBI investigative policy or activities 
should be referred to the SORC, 

1 0. 2.3 .1 f U] Factors to Consi d er for Re vi e w an d Rfcom m fn d atton 

(U//FOUO) In addition to factors unique to the proposal being considered, the SORC will 
consider the Following in determining whether to recommend that a proposed activity be 
approved: 

A | (U//FOUO) Seriousness'severity of the violation/ threat being investigated; 

B) (U/.'FOUO) Significance of the information sought to the violationMtreat being investigated; 

C) (U//FOUO) Probability that the proposed course of action will be successful; 

D) (U//FOUO) Risk of public exposure, and if there is such a risk, the likely impact on public 
confidence in the FBI; 

E) fUy/FOUO) Whether and the extent to which, the proposed course of action may impact civil 
liberties, privacy, or constitutional right?; 

F) (U//FOUO) Risk to the national security or the public welfare if the proposed course of action 
is not approved (i.e,, nsk of doing nothing); 

G) (U//FOUO) Whether relevant legal and policy restrictions have been identified and considered 
and the investigators have a plan to address such issues; 

M) (U//FOUQ) Whether there are less intrusive feasible means reasonably available: and 

I| (U//FOUO) Whether reasonable mitigation measures have been considered and imposed, 

10.2.3.2 (U) Process for Review and Recommendation 

(U/FQUO) The immediate nature of investigating sensitive matters necessitates quick action 
on proposals, Accordingly, the entire SORC process should, absent unusual circumstances, be 
completed wilhiti 30 calendar days of the initial submission by the field office or FBIHQ, 

(U 'V'FOUO) A field office or FBIHQ component must submit a proposal by electronic 
communication (EC) to the applicable M31 HQ operational division section chief, The FBIHQ 
operational division must forward the proposal to OGC within 3 business days. The field 
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office is encouraged to consult with the operational division regarding the merits of the 
proposal before submitting it in order to facilitate expeditious processing at FBIHQ. 

A} (Uy/FQUO) The applicable FBI HQ operational division must consult with the OGC to 
determine whether there are any legal or significant policy prohibitions to the proposed 
activity, to include whether the activity is likely to influence the exercise of First AmeruJmerU 
rights by members of an organization. Within 5 business days the OGC must determine 
whether there are any legal prohibitions lo the proposed activity, If (here are none, OGC musl 
submit the proposal lo the SORC Staff, If OGC raises policy concerns. OGC must include an 
addendum to the proposal describing those concerns lo the SORC staff 

Bl (U.'/FOUG) Upon receipt of the EC and OGCs authorization to suhniii the proposal, the 
SORC Staff musl place the proposal or the agenda for the next SORC meeting. SORC 
meetings are scheduled monthly but can be supplemented by ad hoc meetings if necessary. 

C) EU//FOUO) Seven calendar days prior to a scheduled SORC meeting, the SORC Staff must 
circulate the agenda and pending proposals to SORC members. Each proposal must contain all 
relevant information, including the following: a detailed description of the proposal; the 
proponent" s explanation for the proposal and an estimate of the period of time tor which it 
w-ould be maintained; OGC's analysis of any significant policy ooneemN to the proposed 
activity; and a description of procedures to minimize the acquisition, retention, and 
dissemination of information regarding USPERs that does not relate to the matter under 
investigation or In other authorized FBI purposes but that might be incidentally collected and 
retained absent such procedures, In the case of an ad hoc meeting, the proposal requiring 
review should be circulated at least 24 hours prior to the meeting. 

D> (TJ//FOUO) SORC meetings are to be conducted with the expectation that recommendations 
will be issued when proposals are presented. If discussion reveals that additional information 
is required to formulate a recommendation, the SORC Staff is required to facilitate access lo 
all information requested by the SORC or by any SORC member. Because SORC members 
will receive proposal materials in advance and have the opportunity to consult with 
appropriate FBI or DOJ personnel prior lo meeting On a proposal, SORC members, or 
assistants attending meetings in their place, are expected to make a recommendation on the 
proposals at ihe meeting. LYpfc : Meetings [hut do not resull in a recummendaEiun on a 
proposal because members wish to consult others prior to acting should be rare,] 

E) (U//FQUO) If there is no consensus among the SORC members on whether the proposal, 
should be approved, the SORC recommendation must provide a fair recitation of the divergent 
views. 

Fl (U//FQUO) Once the SORC has made ils recommendation, the SORC Stall musl submit ihe 
proposal through the appropriate Executive Assistant Director to the Director with the 
SORCs recommendation for approval or disapproval, together with any changes or 
amendments to the proposal that the SORC recommends. 

G) (U//FGUO) For each proposal,, at the next SORC meeting the SORC Staff must ensure Lhat 
SORC members are notified whether the Director decided to adopt the recommendation, reject 
the recommendation, or consult with the Office of the DAG. Should ihe Director adopt a 
proposal that either the Assistant Attorney General of the NSD or the Assistant Attorney 
General of the CRM (or one of their designees} has recommended; against, the SORC Staff 
must notify the relevant Assistant Attorney* s) General. By EC. SORC Staff must notify the 
submitting office and sponsoring division in a timely manner of the Director's decision, 
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1 0.2. 4 (U) Emergency A uthqriza tion 

(U//FOUO) When necessary to seize an operational opportunity, in investigations where SORC 
consideration and Director approval would otherwise be required, emergency approval may be 
granted by the SAC or FBIHQ Deputy Assistant Director with written notice to the SORC Staff 
within 48 hours of granting such approval. Unless a SORC member objects to the operation upon 
receiving such notice From the SORC Staff, the operation may continue until it is reviewed at the 
next scheduled SORC meeting, w hen the SORC must make a formal recommendation to the 
Director whether the activity should continue. If, however, a SORC member objects to the 
operation upon receiving notice, an ad hoc meeting must be called, 

10.2.4.1 (U) NGTICE/OVESSIGHT FUNCTION OF SORC 

(U^/FOUO) To facilitate its ability to review and provide reeomincndations to the Director 
about Certain sensitive LDP as described id paragraph C.l, above, the SORC will ulsci receive 
notice by EC of the follow big other forms of U DP: 

A} (U^TOUO) In a Predicated Investigation involving non-sensitive LDP, any approval to task a 
CHS or FBI employee to engage in UDP that < 1 ) is intended to influence the exercise of First 
Amendment rights by members of the organization; or (2'J OGC has determined is likely lo 
influence the exercise of First Amendment rights by members of the organ izatton- 

B) (U/FOL'O) in a Predicated Investigation involving either sensitive or non-sensitive UDP, any 
approval to task a CHS or FBT employee to engage in, UDP that may influence the exercise of 
First Amendment rights by members of the organization but which OGC has determined is not 
likely to influence the exercise of such rights. 

C) (U//FQUQ) In a Predicated Investigation involving sensitive UDP. any approval to task a CHS 
or FBI employee lo engage in UDP that will influence the activities of an organization but 
which OGC has determined is not likely to influence the exercise of First Amendment rights 
by members of the organization, 

D) {UAFQUO) In an Assessment or Predicated Investigation involving Sensitive UDP, any 
approval to task a CHS or FBI employee to join an organ nation or participate in its activities 
and obtain information. 

E) IU//FOUQ) In an Assessment involving sensitive UDP, any approval to task a CHS to obtain 
information that is not generally known to regular members or participants, regardless of prior 
membership or participation. 

(U//FOUO) ,\Me: Notices of UDP falling into any of the above-listed categories inusi be 
provided by the approving official by EC to the appropriate SORC staff within 3 0 days of 
approval, The SORC members and chairs will receive periodic reports on such UDP from the 
SORC staff on a schedule and irt a form to be determined by the SORC, 

F) fU/r'FOUG) The SORC may task FBI divisions or field offices lo provide it: 

1 1 (U//FOUO) Information regarding any FBI investigative activity that will assist in its 
oversight function: 

2 1 (U//FOUO) Information regarding any Assessment involving a sensitive investigative 
matter (SIM) that has received unwarned or unfavorable press exposure; and 

(U//FOUO) Information regarding operations designated as national security special 
events. 
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G) (UtfFOUO) Fhe SORC must receive notice of any proposal to use palEem-bascd data mining 
queries or other analysis of electronic databases using rwo or more search criteria designed to 
discover Or locale a predictive pattern or anomaly indicative of terrorist or criminal activity on 
the part of any individual or individual? (as de lined in Corporate Policy Directive 031 0D), 
This includes data mining conducted during counterintelligence Assessments or investigations 
or other national security ma tiers. Any such analysis based solely on racial, ethnic, national 
origin or religkms characteristics is strictly prohibited. A Privacy Threshold Analysis (PTA) 
for the activity must be completed and forwarded to the Privacy and Civil Liberties Unit, 

OGC. in conjunction with notilying SORC of the pattern-based data mining. (Note: For 
purposes of this requirement, p^etem-based data mining does not include activities using one 
or more personal identifiers to identify an individual or analysis designed to discover links 
between a specific subjecl and unknown individuals or entities, even if tlie subject's actual 
identity is not yet known. Pattern-based data mining does not include queries or analysts 
designed solely to identify 1 human sources of intelligence nor does it include activities 
designed to identify an individual or individuals associated with criminal or terrorist activity 
that has already occurred- For example, database queries using multiple criteria to identify 
foreign visitors to the United States of a certain age and gender from specific foreign countries 
who may engage in espionage is pattern -based data mining within the meaning of the statute. 
In contrast, database queries using criteria such as physical description and motor vehicle 
ownership to identify possible suspects in a kidnapping do not constitute pattern-based data 
mining, because the queries are being used to investigate a crime that has already occurred, 
Queries designed to identify individuals or entities who have had contact with a specific 
individual are not pattern-based data mining: ralhtx. such queries are subject-based data 
mining, even if the specific individual’s actual identity is presently unknown. 

HHU.//FQUO) Senior Executives from the FBI or DOJ may submit other items to the SORC as 
deemed appropriate to the executive. 

1 0.2 S (U } Logistics 

(U/.'FOUO) The Executive Assistant Director for the MSB is responsible for all logistical support 
required for the proper functioning of the SORC (i.e., schedule meetings, provide place for 
meetings, draft agendas, record keeping and retention functions, all necessary communications, 
etc.'l. The CPO and the OGC will assist in establishing the logistical support required for the 
SORC, 
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11 (U) LIAISON ACTIVITIES AND TRIPWIRES 


11.1 (U) Overview 

(U//FOUO) FBI employees are encouraged to engage in liaison with the general public, private 
entities, and with local, state, federal, tribal, and foreign government agencies for the purpose of 
building partnerships. As part of our liaison, community outreach, or invest igative/inle! I igenee 
missioiii, FBI employees may also establish tripwires with public entities, private entities, and 
other governmental agencies. Liaison and tripwire initiatives are mutually beneficial for the FBI 
and the public not only because they help build cooperative relationships and educate about 
suspicious activities or potential threats, but also because they encourage the public to contact 
the FBI should they become aware of such suspicious activities or threats, 

1 L2 {UJ Purpose and Scope 

(U//FOUG) The FBI is authorized to engage in liaison activities and tripwire. The procedures for 
liaison and setting tripwires, together with documentation and requirements for an Assessment or 
Predicated Investigation are set forth below, 

1 1*3 {lij Approval Requirements for Liaison and Tripwires 

(U//FOUO) Conducting liaison activities or tripwire initiatives do not require approval or the 
opening of an Assessment or Predicated Investigation unless Lhey use an investigative method set 
forth in DIOG Sections 18.5 - 18.7, Liaison and Tripwire initiatives may be conducted as part of 
an already -opened Assessment or Predicated Investigation. 

1 1.3. 1 (U) Scenario 1 

(U//FOUO) An FBI employee makes contact with a chemical supply company to introduce 
hi mse ItTherscI f and educate the owner about the Bureau's investigative focus on the illegal use of 
precursor chemicals to make improvised explosive devices. The employee advises the owner to 
Contact the FBI if be/she observes any unusual or suspicious purchases of certain precursor 
chemical s. 

(U//FOUG) Resputtstr : Such a contact would not require approval or the opening of an 
Assessment or Predicated Investigation because no investigative methods are used to conduct 
this activity. 


113.2 (U) Scenario 2 

(U//FOUG) Using the same facts as above, except the FBI employee interviews the owner about 
recent purchases of precursor chemical? and request? the owner to voluntarily produce copies of 
alt purchase record?, 

(U- FOUO) Re&twtise : This differs from scenario #1 above because it uses investigative methods 
described in the AGG-Dom and DIOG Section 18 (interview and request information from 
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in embers of (he public), To conduct such activity (whether called liaison or setting a tripwire) 
would require an Assessment or a Predie aled Investigation to be open. 

11.4 (U) Documentation & Records Retention Requirements 


(L. IGUG) The terms “liaison” and “tripwire” have been defined in various ways and may differ 
by FBEHQ division, program, or field office. Not every contaet with a member of the public will 
be considered liaison activity or a tripwire initiative that needs to be documented. As slated 
above, employees are encouraged lo engage and converse with the publie as part of their routine 
FBI investigative and intelligence mission. 

(L.7/FGUO) Often, however, these terms are used and/or defined in a formal policy or EC to 
accomplish a particular investigative or intelligence objective. When an employee is directed by 
a supervisor, FBI policy, ora FBI HQ division to establish a liaison relationship or set a tripwire, 
that directive, as well as the actions taken by the employee, must be documented with an FD- 
999. If an employee on his or her own initiative contacts a member of the public and 
subsequently determines the contact was a liaison or tripwire activity, the contact must be 
documented using the FD-999. Any questions regarding whether the employee’s contact with the 
public should be dtjciimcnted as liaison or tripwire activities should be directed to the 
employee’s supervisor. The intent of this section is to ensure that contacts with the public which 
arc considered to be liaison activities or a tripwire initiatives he dneumenled with the FD-999 
into a single database system for tracking and reporting purposes. 

(L.'-'FOUO) When the FD-TO is used to document liaison activities or tripwire initiatives, it 
must be uploaded to file number 3 1 9X-HQ-A 1 4877 1 8. Copies of the FD-999 must also be filed 
as follows: 

A > i U/'/FGUO) No Investigative Methods Used : If no investigative methods t D!OG Sections 
1 8.5 - 1 8.7) are used in the liaison activity or tripwire, the FD-999 may be uploaded into an 
investigative file or control file. 

B) (U.'/FQUOj Investigative Methods Used : If investigative methods (DIQG Sections 18.5- 
1 8.7) 0 re in E he liaison activity or tripwire, (he FD-999 must also be uploaded in one of 
the following: 

I t (L.7/FOUO) an Assessment file; 

2) fU.'/FOLJO) a Predicated Investigation file; 

3) (U //FOUO ( a domestic police cooperation tile (343 classification); 

4 \ R'-TOUO) a lbreipi police cooperation file (163 classification}; or 

5) (U./FOUOl a lechn i cal assistance control file (if only technical assistance is provided). 
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12 (U) ASSISTANCE TO OTHER AGENCIES 




12.1 (U) Overview 

(U//FOUO) Part II of the Attorney General’s Guidelines for Domestic FBI Operations (AGG- 
Dom.) authorizes the FBI to conduct investigations in order to detect or obtain information about, 
and prevent and protect against, federal crimes and threats to the national security and to collect 
foreign intelligence. (See DIOG Section 2 .) Section 12 does not apply to assistance the FBI may 
provide in other agencies while conducting joint investigations. In such instances, other sections 
of the DIOG dealing with Assessments and Predicated Investigations would apply. 

(U//FOUO) Section 12 specifically addresses those situations in which the FBI has been 
requested or is seeking to provide assistance to other agencies and does not have an open 
Assessment or Predicated Investigation. Part III of the AGG-Dom, Assistance to Other Agencies, 
authorizes the FBI to provide investigative assistance to other federal-, state, local or tribal, or 
Foreign agencies when the investigation has the same objectives as Pan II of the AGG-Dom or 
when the investigative assistance is otherwise legally authorized. Accordingly, FBI employees 
may provide assistance even if it is not for one of the purposes identified as grounds for an FBI 
investigation or Assessment if providing the assistance is otherwise authorized by law. For 
example, investigative assistance is legally authorized in certain contexts to state or local 
agencies in the investigation of crimes under state or local law, as provided in 28 U.S.C, § 540 — 
felonious killing of stale and local law enforcement officer; 28 U.S.C. § 540 A — violent crime 
against travelers: 28 U.S.C. £ 54UB — serial killings, and to foreign agencies in the investigation 
of foreign law violations pursuant to international agreements. The FBI may use appropriate 
lawful methods in any authorized investigative assistance activity. 

12.2 (U) Purpose and Scope 

(U) The FBI may provide investigative and technical assistance to other agencies as set forth 
below. 


1 2.2. 1 (U) Investiga tive Assistance 

(U) The AGG-Dom permits FBI personnel to provide investigative assistance to: 

A) (U) Authorized intelligence activities of other United States Intelligence Community (USICj 
agencies; 

D) (U) Any federal agency in the investigation of federal crimes, threats to the national security, 
foreign intelligence collection, or any other purpose that may be lawfully authorized; 

C) (If) Assist live President in determining whether lo use the armed forces pursuant to 1 ft LLS.C. 
$ § 351-33, when authorized by Department of Justice (DOJI, as described in Section 
12,3.2.2.1.1, below; 

D) ( U) Collect information necessary to (adiitate public demonstrations and to protect Lhe 
exercise of First Amendment rights and ensure public health and safety, when authorized by 
DOJ and done in accordance with the restrictions described in Section 1 3.3 22-tX below; 
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E} (U) State or local agencies in the investigation of dimes under state or local law when 
authorized hy federal law (e,g., 2K U SX’ §§ 540 -felonious killing of state and local Law 
enforcement officer; 54£>A — violent crime against travelers; 54-OB — serial killings); 

F) (II) Stale, local, or tribal agencies in the investigation of matters that may involve federal 
crimes or threats to rational security* or for such other purposes as may be legally authorized; 

G) (U) Foreign agencies in the investigations of foreign law violations pursuant to international 
agreements, and as otherwise set forth below, consistent with the interests of the United States 
(including national security interests) and with due consideration of the effect on any US 
Person (USPER); and 

H) (U) The Attorney General has also authorized (he FBI to provide law enforcement assistance 
to state or local Law enforcement agencies when such assistance is requested hy the governor 
of the stale pursuant to 42 U.S.C. S 10501 (lor example, federal law enforcement assistance 
following Hurricane Katrina), The Attorney General must approve any request for assistance 
under 42 IL5.C g 1050L 

(U) The procedures for providing investigative assistance, together with the standards, approval, 
notification, documentation, and dissemination requirements are set forth in Sections 12.3, 12.5, 
and 12,6 below. 

1 2.2.2 (U } Technical Assista nce 

(U) The FBI is authorized io provide technical assistance to all duly constituted law enforcement 
agencies, other organizational units of the DOJ, and other federal agencies and to foreign 
governments (to the extent not prohibited by law or regulation). The procedures for providing 
technical, together with the approval, notification, documentation, and dissemination 
requirements are set forth in Sections 12.4, 12,5 and 12,6 below. 

12.3 (U) Investigative Assistance to Other Agencies - Standards, 

Approvals and Notice Requirements 

(U) The FBI may provide investigative assistance to other agencies by participating in joint 
operations and investigative activities with such agencies. (AGG-Dom, Part EII.E, I ) 

(U//FOUO) Dissemination of information to other agencies must be consistent with Director of 
National Intelligence (DNI) directives, the AGG-Dom, DIOG Section 14, FBI Foreign 
Dissemination Manual, the Privacy Act of 1974, and any applicable memoranda of 
understand mg/ agreement (MOU/MOA), laws, treaties or other policies, (See Sections 12.5 and 
12.6 below for documentation ami dissemination of information requirements,) 

12. 3.1 (U) Standa rds for Providing In vestiga tive Assista nce to 0 ther 

Agencies 

(U//FOUO) The determination whether to provide FBI assistance to other agencies is 
discretionary but may only occur if; 

A) (U, ''/FOLIO) The assistance is within the scope authorized by [he AGG-Dom, federal laws, 

regulations, or other legal authorities; 
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B) (UjVFDUO) The investigation being assisted is not based solely on the exercise of First 
Amendment activities or on the race, ethnicity, national origin or religion of the subject or a 
combination of only these factors' and 

C) (UjVTOUO) The assistance is an appropriate use of FBI personnel and financial resources, 

12.3.2 (U) A UTHORI TY f A PPRO VAL A ND NOTICE REQUIREMENTS FOR PROVIDING 

[nvestiga tive Assistance to Other Agencies 

(U//FOUO) Investigative assistance that maybe furnished to other agencies is described below 
by agency type. 

1 2 .3.2. 1 ( II) 1 N VE5T1G ATI VE A5SI STANCE TO UN ITEU STATES INTELLIGENCE COM MU N 1 T¥ 

(USIC) Agencies 

12.3.2.1.1 (U) Authority 

A) (U//FOUO) The FBI may provide investigative assistance (including operational support} lor 
authorized intelligence activities of other LiSIC agencies. (AGG-Donx Part IIJ.A) 

B) (U//FOUG) Investigative assistance must be in compliance with interagency MOU/MOA, if 
applicable. For example, specific approval and notification requirements exist for assisting the 
Cenlrai Intelligence Agency [CIA } and the Department of Defense (DOD) domestic activities 

1 232.1 2 (V) A pproval Requirements 

A) (Ui'VFOUO) Genera/ : If assistance to a component of the USIC will involve the use of 
investigative methods other than those authorized for Assessments {chose in DKXi Sections 

! 8.6 - 1 8.7), prior SSA approval must be obtained with the FD-999. Supervisory approval for 
use of investigative methods authorized only for use during Predicated Investigations shall be 
at the same level required for the use of that investigative method during an FBI investigation 
as provided in DIOG Sections 18.6 - 18.7. Approval for use of specific technologies is set 
forth in Section 12,4 bdow. 

B) tUffFGUU) Sensitive /nvestiegfivL 1 Matters (SI Ml : Any investigative assistance to other 
USIC agencies involving a SIM requires Chief Division Counsel {CDCVOffiCe of the General 
Counsel (OGC) review, SACVSeclion Chief (SC) approval, and notification, as specified in 

1 222.]. 3. B, below. 

1 233. L 3 (V) Notice Requirements 

A) EU//FOUO) Genera/ : Notice must be provided for the investigative activity or invest igal ive 
method as specified in the DIOG or applicable MOU/MOAs, 

B> tUETQLK)) Sensitive fmwstieiiiiw Matters (SIM} : In addition to the above-required 

approvals, any investigative assistance to USIC agencies Involving a SIM requires notification 
to the appropriate FBI Headquarters (FBI HQ) operational Unit Chief [UC) and SC by 
Electronic Communication (EC) as soon as practicable, but no later than calendar days 
after the initiation of the investigative assistance, The appropriate FSIHQ operational unit 
must provide notice to the DOJ Criminal Division or National .Security Division (NSD) as 
soon as practicable, but not later than 30 calendar days aller the initiation or any investigative 
assistance involving a SIM, 
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G) {U//FOUO} Cfiiydfied Appendix ; See the classified provisions in DIOG Appendix G for 
additional notice requirements. 

1 2,3.2. 1.4 (U) Documenta tiq\ Requirements 

(U//FOUO) Investigative assistance (including expert) to USIC agencies using an 
investigative method, other than those authorized in assessments, must be documented 
with the F P-999, filed and uploaded to an appropriate file as specified in Sections 12,5 
and [2. ft bdnw. Division PGs may require specific additional reporting requirements for 
their programs. 

12,3,2,2 (U) Investigative Assistance to Other United States Federal Agencies 

1 23.2.2. 1 (U) A VTHQRITY 

A) (U//FOUO) The FBI may provide investigative assistance to any other federal agency in (he 
investigation of federal crimes or threats to the national security or in the collection of positive 
foreign intelligence. (Pursuant to DIOG Section 9, collection of positive foreign intelligence 
requires poor approval from the Collection Managemerii Section (CMS), FBJHQ.) The FBI 
may provide investigative assistance to any federal agency for any other purpose that may be 
legally authorized^ including investigative assistance to the United States Secret Service 
(USSS) in support of its protective responsibilities. (AGG'Dom. Pari 31LBJ ) Sec DIOG 
Section 12.4 below for guidance in providing technical assistance to federal agencies, 

B) (U//FOUO) Invcsti gal i vc assistance must be in compliance with interagency MOU/MGA, if 
applicable. 

12 JJ, 2, 1,1 (U) Actual or Threatened Domestic Civil Disorders 

A) tU) At the direction of the Attorney General, the Deputy Attorney General, or the Assistant 
Attorney General for the Criminal Division, the FBI shall collect information relating to actual 
or threatened civil disorders to assist the President in determining (pursuant to the authority of 
the President under 10 U.S.C, §§ 33 1-33 ) whether use ofthe armed forces or militia is 
required and how a decision to commit troops should be implemented. The information sought 
shall concern such matters as (AGG-Dom, Part IEI.B.2): 

1 ) (U) The size of the actual or threatened disorder, both in number of people involved or 
affected and in geographic area; 

2) (U) The potential for violence: 

3) (U) The potential tor expansion of the disorder in light of community conditions ami 
underlying causes of the disorder 

4) (U) The relationship of the actual or threatened disorder to the enforcement of federal law 
or court orders and the likelihood that state or local authorities will assist in enforcing those 
laws or orders; and 

5) (U) The extent of state or local resources available to handle site disorder. 

B) (U) Civil disorder investigations will be authorised only for a period of 30 days, but the 
authorization may be renewed for subsequent 30 day periods. 

C) (U) The only investigative methods that may be used during □ civil disorder investigation are: 
I) (U) Public information (See DIOG Section 18,5.1); 
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2) (U) Records or information - FBI or DOJ (See DKXi Section 18.5*2); 

5) (U) Records or information - Other Federal, stale, local, or tribal, or foreign governmental 
agency (Sec DIOG Section IS. 5.3); 

4) (U) Online services and resources (See DIOG Section 18.5,4}; 

5) (U) Interview or request information from the public nr private entities (See DIOG Section 

18 5.6); 

(U//FOUO) Such interviews may only be conducted if the FBI employee 
identifies himself or herself as an FBI employee and accurately discloses She purpose of 
the interview, 

6) (U) Information voluntarily provided by governmental or private entities. (See DIOG 
Section 1 8.5.7); and 

7) (U) Any other methods may he used only if authorized by the Attorney General, (toe 
Deputy Attorney General, or the Assistant Attorney General for the Criminal Division. 

I2J.2.2.1.2 (L. ) PL SLit Health a\d Safety authorities t> Relation to 

Demonstrations 

A) (U) At the direction of ttoe Attorney General, the Deputy Attorney General, or the Assistant 
Attorney General for itoe Criminal Division, the FBI shall collect information relating to 
demonstration activities that are likely to require the Federal government to take action to 
facilitate the activities and provide public health, and safety measures with respect to those 
activities. The information sought in such an investigation shall be Lhal needed to facilitate an 
adequate federal response to ensure public health and safety and to protect the exercise of First 
Amendment rights, such as: 

1 ) (LI) The time* place, and type or activities planned: 

2) (LI) The number of persons expected to participate; 

3) (U) The expected means and routes of travel J or participants and expected time of arrival; 
and 

4) (U) Any plans for lodging or housing of participants in connection with lire demonstration. 

B) (U) Die only investigative methods lhal may be used in an investigation under this paragraph 
are: 

] ) (U) Public Information (See DIOG Section 18,5 J): 

2) (U) Records or information - FBI and DOJ (See DIOG Section 18,5,2); 

3) ( U) Records or information - other Federal, state, local* tribal* or foreign government 
agencies (See DIOG Section 1 £.5.3); 

4) ( U) Use online services and resources (See DIOG Section 1 8.5.4k 

5) (U) Interview or request information from, the public or private entities (Sec DIQG Section 
18.5,6); 

( U.'/FOUQ} Note : Such interviews may only be conducted if the FBI employee identifies 
himself or herself as an FBI employee and accurately discloses the purpose of the 
interview; 
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6) (U) Accept information voluntarily provided by governmental or private endues {See 
DIOG Section 18,5.7); and 

7) (U) Any other methods may be used only if authorized by the Attorney General, the 
Deputy Attorney General, or (he Assistant Attorney General for the Criminal Division. 

1 2. 3. Z 22 (U) A ppro val Requirements 

A) (U//TOUO) General : If assistance to another federal agency will involve the use of 
investigative methods other ihan those authorised for Assessments, prior Supervisory Special 
Agent {SS A) approval must be obtained with the FD-999. Supervisory approval for use of 
investigative methods authorized only for use during Predicated In ves ligations shall be a( the 
same level required for use of that investigative method during an FBI investigation as 
provided in DIOG Sections 18.6 and 1 8.7. Approval for use of specific technologies is set forth 
in Seel ion 12.4 below. 

B) {U//FOUO) A’ew.virfi'tf tnvesliiitiriie Manets (SIM I : Any investigative assistance to other 
federal agencies involving a SIM requires prior CDC/OGC review and SAC/SC approval., and 
notification, as specified in 12.3 ,2,2.3 -B below. 

1 Z 32.23 (U) A ft) TICE REQUIREMENTS 

A) (U//FOUO) General / Notice must be provided for the investigative activity or investigative 
method as specified in (ire D!GG and applicable MGU/MOAs. 

B) (U/'FQUO) Semitive h/wtiittifive Mutters (SIM) : in addition to the above-required 
approvals, any investigative assistance to another federal agency involving a SIM requires 
notification to the appropriate FBIHQ operational UC and SC by EC as soon as practicable, 
but no later titan 15 calendar days after the initiation of the assistance. The appropriate FBIHQ 
operational unit must provide notice to the DGJ Criminal Division or NSD as soon as 
practicable, but not Eater than 30 calendar days after (he initiation of any assistance involving a 
SIM. 

C) fU/ 1 FOLIO 3 Classified Appendix ; See Lhe classified provisions in PICK} Appendix G lor 
additional notice requirements. 

1 23.2.2.4 (U) Document a tion Requirements 

(U//FOUG) Investigative assistance {including expert) to other Federal agencies using an 
investigative method, other than those authorized in assessments, must be documented 
with the FD-999. filed and uploaded to an appropriate tile as specified in Sections 12.5 
and 12.6 below. Division PCs may require specific additional reporting requirements for 
their programs, 

1 2. 3.2.3 [U] INVESTIGATIVE ASSISTANCE TO ST ATE, LOCAL AND TRIBAL AGENCIES 

(U) The FBI may provide investigative assistance to state, local and tribal agencies.; 

A) (U) in the investigation of crimes under stale or local law when authorized by federal law 
(e.g., 28 U.S.C. §§ 540 — felonious killing of state and local Saw enforcement officer, 540A — 
violent crime against travelers; 540B — serial killings); 

B) (U) in lhe investigation of matters that may i nvolve federal crimes or threats to national 
security, or for such other purposes as may be legally authorized; 
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C) (U) when such assistance is requested by the governor of the stale pursuant to 42 U.SC § 
10.501 (for example, federal law enforcement assistance following Hurricane Katrina}, The 
Attorney General must approve any request lor assistance under 42 G.S.C. $ ID50I; anti 

D) (U) under Limited circumstances, the FBI is authorized to provide “expert" personnel lo assist 
law enforcement agencies in their investigations. This authority is a limited exception lo the 
general rule that the FBI cannot provide investigative assistance to investigate slate crimes if 
there is no federal nexus. 

(U) The authority to provide "expert assistance” to state investigations has teen the subject of 
several opinions from the Office of Legal Counsel (GLC) T DOJ. OLC has opined that the 
limbed authority the FBI has in this area generally derives from its authority lo “assist in 
conducting, at the request of a State {or] unit of local government... local and regional training 
programs for the training of Stale and local criminal justice personnel engaged in the 
investigation of crime and the apprehension of criminals. 1 ’ 42 U.S.C. §3771. and its authority 
to provide Laboratory assistance even if there is no federal crime, 28 C'.F-R- §0. 85(g). OLC 
has made clear that this is not a broad grant of authority but instead is limited to assistance in 
circumstances where lives are in danger or there is a risk of serious bodily harm to a third 
person ora law enforcement officer. Adherence lo the limitations set forth in this policy is 
important, as an employee whose actions exceed these Limitations could be (a) acting beyond 
his or her official authority and therefore not entitled to qualified immunity from civil lawsuits 
or (b) acting outside the scope of his or her employment and therefore not enlilted to DOJ 
representation if sued civilly, 

(U) It should be stressed that the limitations on this authority relate to providing expert 
investigative assistance - not to other types of interaction that could be helpful to our domestic 
law enforcement colleagues, including standard liaison, and training. Thus, for example, while 
it would not be permissible forthc FBI to provide expert assistance lo a stale white collar 
investigation that has no federal nexus (because (here is no life/safety concern), in the face of a 
request for such assistance, the AD It 'SAC of a field office could offer to have an experienced 
white collar investigator provide while collar investigative training to (he police officers in 
lieu of providing investigative assistance. 

(U) As used here, “expert personnel" arc FBI employees who possess special skill or 
knowledge not normally possessed by professional law enforcement officers, that is derived 
from the employee's education, training, or experience; the term does not include FBI 
employees who have specific knowledge aboul a particular investigation derived from 
participating in an investigation prior to the cessation of a federal nexus, or otherwise. 

fU) Areas of expertise for which requests for investigative assistance arc commonly made 
include; Language Services, Polygraphers. Crists Negotiators, Evidence Response Team 
(ERT), Special Weapons and Tactics (SWAT), Hostage Rescue Team (FlftT), and Crisis 
Management, If the pertinent program has a PG or Policy Directive. Ihc policy, procedures 
and approval requirements contained within the PG or Policy Directive must be followed, 

12. 3.2.3. 1 (U) Approval Requirements 

A) (Uj ffciteruk If the request for investigative assistance is based on Section 12.3.2,3. A or B 
above, the approval requirements specified in DIGG Sections 6 or? must be followed, If the 
request for investigative assistance is based on Section 12.3.2.3, C above, the Attorney General 
must approve the request, 

B) (U) Expert In vestieati re Assistance : If the request for expert investigative assistance is based 
Oft Seel ion I2.3.2J.D above and il is not covered by an existing PG Or Policy Directive, the 


12-7 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


§12 


UNCLASSIFIED - FOR OFFICIAL LSI: ONLY 
Domestic Investigations and Operations Guide 


ADIC/SAC in the field office tor the FBIHQ SC if the request is received at FBIHQ) may 
approxe the request with notification as soon as practicable to the General Counsel if: 

1 ) (U) The head [or designee) of the state, local, ar tribal law enforcement agency has 
submitted a written request {including by email) to the FBI which; 

a) (U) Identifies the need for specific expertise from the FBI; 

b) (U) Articulates the risk of an imminent threat of death or serious injury' to members of 
the public or law enforcement personnel or a significant risk to public safety: and 

c) (U) Represents that the agency docs not have available employees with the needed 
expertise or that the employees who do have the needed expertise are not sufficiently 
well trained to handle the immediate situation, 

(U) Note : If due to the exigency of the situation then; is not time for the request to be 
submitted in filing, the request may be made orally, but must be followed by a written 
request as soon as practicable, but not more than five {5) business days. 

2) (U) The C DC, who is encouraged to consult with attorneys in the Investigative L&w Unit, 
OGC (ILU), has reviewed the request and concluded that providing the requested 
assistance is consistent with this policy and does not create a significant risk of civil 
liability to the FBI or the individual employee. If (he CDC assesses that the assistance will 
create a substantial risk of civil liability, the CDC must consult with ELL r prior to 
approving the request. Additionally, the CDC is encouraged to consult with the Science 
and Technology Law Office (STLO) in OGC whenever questions arise Concerning expert 
assistance associated with the use of Law Enforcement Sensitive (LES) technology, 
including techniques and capabilities. 

3) (U) The requesting agency is acting in the lawful execution, of an authorized function of 
that organization; and 

4) (U) The loan of FBI personnel is an appropriate use of personnel and Financial resources 
and does not jeopardize any ongoing TBI investigation. 

1 2. 3.2. 3.2 (U) Notice Requirements 

A) (U//FQUO) General ; Notice must be provided fur the investigative activity or investigative 
method as specified in the DIOG, and applicable MOU/MOAs and/or treaties. 

B) j U.VFOUO) Sensitive tnvi'atiea/ive Matters (SIM) : In addition to the above-required 
approvals, any investigative assistance provided to a state, local, or tribal law enforcement 
agency involving a SIM requires notification to the appropriate FBI HQ operational unit and 
section by EC as soon as practicable, but no later than 1 5 calendar days after the initiation of 
the assistance. The appropriate FBIHQ operational unit must provide notice to the IX)J 
Criminal Division or NS LI as soon as practicable, but not later than 30 calendar days after the 
initiation of any assistance involving a sensitive investigative matter. 

(U/ 'FOUO i Classified Appendix : See the classified provisions in DltXi Appendix G for 
additional notice requirements. 

12.3.2. 3. 3 (U) Documenta tion Rfq uirements 

(U/i'FOUO) Investigative assistance (including expert) using an investigative method 
other than those authorized in assessments, must be documented with the FD-WM, filed 
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and uploaded to an appropriate file as specified in Sections 1 2,5 and 12.6 below. Division 

PGs may require specific additional reporting requirements for their programs. 

12. 3.2. 3. 4 (U) Examples of Expert Investiga tive Assistance 

(U//FOUO) Example i: A small town lias experienced a string of mugging hut none ofthe 
victims. all elderly women. have heen able to identify her attacker. The muggings have all 
occurred during commuting hours near shops. The community is quite upset. The local 
newspaper has published a number of stories on the attacks and reported that many women are 
afraid to leave their homes. The local police department is convinced: that people have 
information that would help identify the assailant, hut because the attacks cake place during 
commuting hours they do not have enough officers to cover ail the places where mugging? 
have occurred during the short lime frame of the attacks. They ask agents in the local RA to 
assist with interviewing commuters. 

(U//FOUD) Response I : The FBI cannot provide this assistance because this is a request to 
provide routine investigative assistance (additional manpower), not expert assistance. 

(U//FOUG) Example 2 : A midsize city police department receives several 91 ] calls 
Indicating at least one, and perhaps more, gunmen have entered a 25-story office building and 
shot several employees on the 15th floor. One gunman was seen exiting the building, was 
chased by local police to a nearby home, and the gunman now holds several hostages and is 
shooting at police. The eity T s SWAT team deployed to the house. The local Police Chief orally 
requests for the assistance ofthe FBI’s SWAT team and crisis negotiators because the 
department's SWAT personnel cannot cover both the house and the bn tiding simultaneously 
and the department does not have crisis negotiators. 

(U//FOUO) Response 2; The SAC may provide this expert investigative assistance, 
notwithstanding the apparent lack of federal nexus, if local resources are insufficient to handle 
this emergency situation that poses art imminent risk of harm to the public. It would be 
appropriate for the FBI SWAT personnel to sweep the office building while local forces 
continue to deal with the barricaded subject. The crisis negotiators could be dispa iched to the 
barricaded subject because the local department lacks such expertise. A crisis negotiator could 
also be deployed if the local police department had a crisis negotiator but assessed his/her 
skills were inadequate for the situation Before granting the request, the SAC must have the 
CDC review it to determine whether there is a significant risk of civil liability. If the expert 
investigative assistance is provided, the field office must notify the General Counsel as soon 
as practicable, in addition, the oral request must be followed by a written request from the 
police department head as soon as practicable, but not more than five (5) business days. The 
investigative assistance rendered in these circumstances must be documented with the FD-W 
and uploaded to the appropriate file as set forth in Section 12.5, 

(TJ//FOUO) Example 3: A local police department is investigating a local doctor for 
molesting his pediatric patients. One of the potential victims is a It) year old girl who is 
mentally disabled. The local FBI field office has a chitd victim expert who has expertise in 
interviewing mentally disabled children; the police department has a child victim specialist 
who has no specialized training in handling mentally disabled victims. The police chief seeks 
(he assistance of the FBI's child victim specialist. 

t U//FOLJO) Response 3; The FBI may provide this requested assistance. Although there is no 
federal nexus, the FBI child victim specialist has relevant expertise that is not generally held 
with in the law enforcemen t community and is not possessed by the local child victim 
specialist. The chief of police can articulate a risk nf serious physical harm because until the 
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pci lite can anesl the doctor, other vhi 1-drcn remain at risk of being molested. Be fore grant mg 
tilt request, the SAC must ha\e the ( DC renew it in determine whether there is a significant 
risk of civil liability. If the e?q>erl investigative assistance is provided, the field office must 
nc.ii i E y (he General Counsel as soon as practicable. The investigative assistance rendered in 
these circumstances must be documented with the KD-WS anti uploaded to the appropriate file 
as set forth in Section 12.5. 

12.3.2.4 (U) Investigative Assistance to Foreign Agencies 

(U/.’FOUO) The foundation of the FBI’s international program is the Legal Attache [ Legal). 
Fach Legal is the Director’s personal representative in the foreign countries in which ho/she 
resides or has regional responsibilities. The Legat's job is to respond to the FBI’s domestic 
and foreign investigative needs. The Legal ean aceomplish this because he.' she develops 
partnerships and fosters cooperation with bis or her foreign counterparts on every level and is 
familiar with investigative rules, protocols, and practices tbaL differ from country to country. 
This is the Legat’s primary responsibility. As such, foreign agency requests for assistance will 
likely come to the FBI through Lhe Legal or International Operations Division (lOD). If, 
however, a foreign agency request for assistance bypasses the Legat or 10 D and is received 
directly by the field office or I Bill Q division, the employee must obtain the prior approval of 
the [CD on the FD-dQtJ before such assistance can be given, as discussed in 111 is section. 

1 2.3.2. 4. 1 (U) A UTito Rims 

A) ( U'TOUOl At the request of foreign law enforcement, intelligence, or security agencies, the 
FBI may conduct invesligalions or provide assishmee 1c investigations hy such agencies, 
consistent with the interests of the United States (including national security interests) and 
with due considcralion of the effect on any US person lUSPERl, I AGG-Dom. Part III D, I i 
The FBI must fellow applicable MGUh ami MOAs [ip include those with other US 
Government (LSG) agencies). Mutual Legal Assistance Treaties (MLATj. Letters Rogatory, 
and c.l her treaties when it provides assistance to Idreign government^, 

1 ) i L,'/-FOlK?i If a request for foreign assistance is received directly from a foreign law 
enforcement or intelligence service and is nol processed through a Legat or 10 D, special 
approvals aic icquiiod prim in providing Lite distance, as specified in l2.T.2.4.2.li Itelow. 

2) (U.'TOUOi The appropriate Legal must coordinate all requests for assistance from 
agencies within his/her urea of responsibility to avoid duplicative requests ami in enstme an 
FBI field office does not respond to a foreign request previous) v denied bv the Legal or 
fOD. 

B) lU-VKJUO) If a US AO request FBI assistance pursuant to an ML AT, I. otters Rogatory- or 
other treaty request, the Held otTLee must open a foreign police cooperation Jile to document 
Lite assistance with written noli! teat inn by F.C or Ibc FD- C )9 l ) tn llte appropriate l.eyAt arid 1012. 

C) (U'/FOUO) The FBI may not provide assistance to a foreign law enforcement, intelligence, or 
security ofiteer conducting an investigation within the United Scales unless suth officer has 
provided prior written notification to the Attorney General of his/her star ns as an agent of a 
foreign government, as required by IK U.5.C. $ 951. [AGG-Dom, Part lll.D 2) The 

noli Beal ion required bv 1 K U.S.t’- £ 1 is uol applicable hi diplomats, consular nfficei^ or 

attaches. 
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D) (U//FQUQ) Upon the request of a foreign govern n real agency, the FRE may conduct 

background inquiries concerning individuals whose consent is documented. (ACG-Dum, Pan 

IIID.33 

J 2, 3,2. 4. 2 (U) A PPROVAL REQUIREMENTS 

A) (U//FOUO) When a request to assist a foreign agency is received from a Legal or 10 D. and 
suclt assistance will require the use of investigative methods other than those that are 
authorized in Assessments, prior SSA approval must be obtained and documented as specified 
in 12.3.2.4.4 below. 

B) (IL/TQUO) tf a request for assistance is received directly front a foreign law' enforcement or 
intelligence service and is not processed through a Legal or IOD* written notification 
documenting the foreign assistance request must he provided to the appropriate L.egat and JOD 
by the FD‘999, and IOD must grant approval prior to providing assistance, regardless of what 
investigative mslhods are used, (See also classified provisions in DTOG Appendix G) 

C) (U /FOUO) The Office of International Affairs (01 A 3 in the DOT 5 Criminal Division, has the 
responsibility and authority for the execution of all foreign assistance requests requiring 
judicial action or compulsory process, FBI IOD must coordinate all such requests with the 
DGJ OLA. (See DAG Memorandum, dated 5/16/201 1, tilled “Execution of Foreign Requests 
for Assistance in Criminal Cases. 11 ) 

D) (U//FOUO) Higher supervisory approvals and specific notifications may be required for 
assistance to foreign agencies involving joint operations, STMs, and using particular 
investigative methods, as noted below and in Sections It) and IS of the DltXi. and in division 
PGs, 

E) (ti//FQUO) Investigations and assistance conducted overseas, as well as related or official 
foreign travel of FBI personnel, require country clearances and notification to the Chief of 
Mission (COM) ur designee. Such overseas investigations and assistance must adhere to the 
supplemental guidance in the KJD PG 

1 2 , 3. 2. 4.3 (U) Notice Requirements 

A) (U/ FOUD) When a foreign assistance request is submitted directly to a Legal or IOD by a 
foreign agency or through an FBE HQ-authorized joint task force operation involving foreign 
agencies lhal has previously been briefed to the Legal. IOD has notice of (he request and the 
FBI employee does lioi need IOD approval prior to providing the assistance. The FBI 
employee must provide IOD and the Legal the results of (he assistance. 

El| CU) The FBI must notify the DQJ NSD concerning investigation or assi stance when: (i) 
FBIHQ’s approval for the activity is required (e.g. h FBIHQ approval is required to use a 
particular investigative method); and (ii) the activity relates to a ihreat to the United Stales 
national security. The FBIHQ division approving the use of the investigative method must 
notify DOJ NSD as soon as practicable, but no later than 30 calendar days after FBIHQ 
approval (see classified appendix for additional notice requirement*), (AGO-Dom, Part 
Ill.D. I ) 

C) (LLTOIJUi> Cfa.vi{fie d Appendix ; See the Classified provisions in DlGG Appendix G for 
additional notice requirements. 

D> (Lf/TOUOt ^iV/i e Investigative Matters {SI XU : Any request for investigative assistance (o 
a foreign agency involving a SIM requires OGC review and IOD SC approval, and 
notification as specified below. In addition to these approvals, any investigative assistance to a 
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foreign agency involving a SIM requires notification to the appropriate FBJHQ operational 
UC and SC by Ft' with an LIIM suitable for dissemination to PGJ as soon as practicable, but 
no Later than 15 calendar days after the initiation of the assistance. Additional ly T the 
appropriate lOD unit musl provide notice to the DOJ Criminal Division or NS Das soon as 
practicable^ but not laser than 30 calendar days after the initiation of any assistance involving a 
SIM. 

1 2. 3,2 A A (U) Doevmen ta tion Requirements 

(U//FOUO) All investigative assistance to foreign agencies musl be documented with an 

FD-yM9 and uploaded to an appropriate file as specified in Sections 12.5 and 12.6 below. 

12, 3,2 AS (V) Examples 

(U//FGUO) Example I : The local Australian Liaison Officer submits a request directly to 
his/her contact agent at the local FBI field office to run record checks (investigative 
assistance) on Platypus, Inc., an Australian-based company suspected of illegally exporting 
technology to China in violation of Australian law. The agent obtains SSA approval to run the 
records checks and completes an FD-999, which electronically notifies. Legal Canberra and 
IOD of the requesb Subsequently, the Legal approves the request, and the agent tops the 
record cheeks and gets negative results. The agent submits a summary EC documenting the 
Assessment request, SSA and Legal approvals, and the results are documented in a zero sub- 
assessmenl file with a "Read and Clear 1 ' lead to Legal Canberra and IOD. 

(U//FOUO) tA ample 1 : The same scenario as above, except the record cheeks provides a 
local address for a subsidiary of Platypus, Inc. In coordination with the Australian Liaison 
Officer, and with the approval of the SSA and IOD, the agent interviews an employee of the 
subsidiary and obtains statements incriminating Platypus, Inc. There does not appear to be a 
threat to the United Slates rational security. The Australian Liaison Officer requests the 
employee be polygraphed (expert assistance!, The agent obtains SSA approval to conduct the 
polygraph examination (because it is a method nor permitted during an Assessment and SSA 
approval is required in DIOG Section IJCG.I2 for the use of this investigative method) and 
documents the request and approval in the FD-9b9 r Upon completion of the assistance, the 
results are documented in the appropriate file with a "Read and Clear” lead to Legat Canberra 
and IOD 

12.4 (U) Technical Assistance to Other Agencies - Standards, Approvals 

and Notice Requirements 

(U//FOUO) FBI technical assistance may he provided to other agencies when: 

A) (U//FOUO) the technical assistance is within the scope authorized by the AGG-Dom. Federal 
laws, regulations, or other legal authorities; 

B) (U//FOUO) the technical assistance is being provided in connection with a matter that is not 
based solely on the exercise of First Amendment activities or on the race, ethnicity, national 
origin or religion of the subject or a combi nation of only these factors; and 

C) (U//FOUO) the technical assistance ban appropriate use of FBI personnel and financial 
resources, 
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12.4.1 (U) Authority 

(U//FOUQ) Pursuant to 28 C.F.R. 30.85(g). FBI Laboratories, including but not limited to, the 
Laboratory Division. Operational Technology Division's Digital Evidence Laboratory, and 
Regional Computer Forensic Laboratories are authorized to provide technical or scientific 
assistance and expert testimony to any duly constituted law enforcement agency. Additionally, 
pursuant to Attorney Genera! (AG} Order 2954-2008, the FBI is authorized to provide reasonable 
technical and expert assistance to Federal state, local, and tribal law enforcement agencies to 
assist such agencies in the lawful execution of their authorized functions. ( See also 2H O.SX §§ 
509, 510 and 530(C)), Such assistance may also be provided to certain foreign agencies (see 
Section 12.4.2.4 below). Under the Order, such technical and expert assistance includes, but is 
not limited to: 

A) (LF) Lending or sharing equipment or property: 

B) (Lf) Sharing facilities or services; 

C) (IT) Collaborating in the devetopmen L manufacture, production, maintenance, improvement, 
distribution, or protection of technical investigative capabilities; 

D) (IF) Sharing or providing transmission, swilching, processing, storage Or other services; 

E) (IF) Disclosing technical designs, knowledge, information or expertise, nr providing training in 
the same; 

F) (U) Providing the assistance of expert personnel in accordance with written guidelines issued 
by the FBI General Counsel or approved by the General Counsel (See Section 12.3.2.3 above); 
and 

G) (U) Providing forensic analysis and examination of submitted evidence. 

1 2. 4.2 (U) A ppro val Reqviremen ts 

12.4.2.1 (U) Technical Assistance to USJC AG£NCt£S 

(UTOUO) Before providing technical assistance Lo a USlC agency* the appropriate FBIHQ 
operational division as well as the OTD should be consulted to determine whether such 
assistance is governed by an existing PG. MQU or other agreement 

12.4.2.2 [If] TECHNICAL As 5 [STANCE to Federal, State, Local and Tribal (Domestic} 
Agencies Regarding Electron ic Surveillance, Equipment, and Facilities 

fU) Field-based technical assistance requests under this section must be approved by the field 
office Assistant Director in Charge (ADIC) or SAC in compliance with the Operational 
Technology D ivisio n iOTDi Domestic Tc ehnie al A ssistance ( DTA> PG . If the request for 
technical assistance involves equipment, facilities or property from more than one field office, 
each field office must approve the use of its resources. 

(U) As specified below, FBIHQ senior executive officials and/or officials of the DQJ must 
approve a request for FBI technical assistance that involves: 

A ) (U) Sensitive Circumstances, as defined in DIOG Section 1 8.7.2 .6., where approval is 
required by an FBIHQ senior executive official or DOJ official designated therein: 
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B) (U) Use of National Security Classified Investigative Technologies in criminal investigations., 
where approval is required by the Deputy Attorney General. DOF, The request should be 
submitted for processing to the appropriate FBI HQ operational division unit responsible for 
the investigation and lo I he OTD SC with program responsibility; 

C) (U) Surreptitious {non-gonsensual) entry into a premises or vehicle or other technical 
operations determined by the Technical Advisor to present a similar risk. Such requests 
require the joint approval of the OTD SC with programmatic responsibility for tactical (covert 
entry) operations and (he held office SAC or ADIC; or 

D) (U) Assistance to foreign law enforcement agencies (See Section 12,4-2.4 below). 

(U) The QTD Foreign Technical Assistance (FT At PG provides additional details specifying 
the procedures and approval process that must be followed when (he FBI is providing 
technical assistance regarding electronic surveillance, equipment, and facilities. 

(U) For technical assistance to foreign law enforcement agencies, see Section 12.4.2.4 and the 
OTD FT A PG 

12.4*2.3 [U] Technical Assistance to Federal, State, Local anp Tribal [Domestic] 

Agencies Involving Equipment or Technologies Other than Electronic 
Surveillance Equipment 

(U) There are limited other situations in which, in the absence of a federal nexusu a domestic 
law enforcement agency may seek technical assistance through the short term loan of 
equipment from the FBI If there is an applicable PG or Policy Directive, the policy and 
procedures contained within the PG or Policy Directive must be followed (see, e,g. h Corporate 
Policy Directive: Deployment of MRAP Armored Vehicles in the Absence of Federal 
Jurisdiction), If no PG or Policy Directive governs the particular equipment sought to be 
borrowed and if the loan of the equipment does not necessarily also entail the loan of 
personnel to use or operate the equipment, then the ADiC/SAC of the field office must 
approve the loan of the equipment in accordance w : ith the following policy and procedures, If 
the loan of the equipment necessarily entails the loan of FBI employees, the policies 
governing expert assistance set forth below must also be followed. 

|(J) Any loan of equipment must be documented through a written agreement between the 
ADIC/SAC and the head of the borrowing law enforcement agency or his/her designee. At a 
minimum, the agreement must provide that the borrowing law enforcement agency will 
reimburse the FBI should the equipment be lost or damaged and that the borrowing law 
enforcement agency will promptly return the equipment when asked to do so by the FBI If 
due to the exigency of the situation there is not lime for the request to be submitted, in writing, 
the request may be made orally but must be followed by a written agreement as soon as 
practicable, but not more than five (5) business days following the loan. 

(U) In considering whether to lend the equipment to the federal, state, local and tribal law 
enforcement agency, the ADIC/SAC must take into account the following: 

A) (U) The purpose for which the equipment is being requested and how the equipment will be 
used m> advance that objeclive: 

B) (U) The likelihood that the equipment will be damaged by the requested use; 
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C) (U) The likelihood thai the field office will reed the equipment during the proposed loan 
period; and 

D) (U ) Whether the borrowing Law enforcement agency has previously violated the terms of any 
loan of equipment or damaged any equipment previously lent by the FI3L 

(Qj The OTD FT A PG provides additional details specifying the procedures and approval 
process that must be followed when the FBI is providing equipment or technologies other 
than electronic surveillance equipment. 

(U) For iechnica] assistance to foreign: law enforcement agencies see Section 12,42.4 below 
and the OTD Foreign Technical Assistance (FT A) PG. 

12.42.4 (U) Tech nical Assistance to Foreign Agencies 

12A2AA (V) Authorities 

A) (U//FOUO) The AGG-Dom, Part III. 0.4 authorizes the FBI to provide other technical 
assistance to foreign governments to the extent not otherwise prohibited by law, 

B) (U//FOUO) AG Order 2954-2008 authorizes the FBI to provide technical assistance to foreign 
national security and law- enforcement agencies cooperating with the FBI in the execution of 
the FBI's counter-terrorism and counter-intelligence duties, and to foreign law enforcement 
agencies to assist such agencies in the lawful execution of their authorized functions. Requests 
under this section for (ethnical assistance wish respect to electronic surveillance and other 
OTD technologies are to be handled pursuant to the OTD FT A PG, 

1 2 42. 4 . 2 (U) A UP nu VAL Requ: remen ts 

tU FDUO) Approvals of requests for technical assistance to foreign agencies are to be 
handled pursuant to the OTD FT A PG. 

1 2 4.2. 4. 3 (U) NOTICE REQUIREMENTS 

A) (LL//FOUO) General : Notice must he provided for the investigative activity or investigative 
mdhod, as specified in the DIOG. and applicable MOU'MOAs and/or treaties. 

B m 1 FOUO> AVmitfi v Inrex/isatfey Marten (ST M) : In addition to the above-required 

approval any investigative technical assistance to the agencies listed in (his section involving 
a SIM requires approval by the SAC (HQ assistance requires SC approval) with notification to 
the appropriate FBI HQ operational unit and secLicin and appropriate OTD section by EC as 
soon as practicable, but no later than 15 calendar days after the initiation of (he assistance. The 
appropriale FBtHQ operational unit must provide notice to the DOJ Criminal Division OF 
NSD as scon as practicable, but not later than 30 calendar days after the initiation of any 
assistance involving a SIM. 

C i i U •■‘FQUQt Classified Ipwurfcv . See the classified provisions in DIDG Appendix G for 
additional notice requirements, 

12, 42 A A fU) Document a tion Requirements 

lU TOUO) All technical assistance rendered must be documented with the FD-999, tried and 
uploaded to tin appropriate file as specified m Seel ions 12.5 and 12.6 below. 
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12.5 [U] Documentation Requirements for Investigative or Technical 

Assistance to Other Agencies 

1 2S. 1 (U) Document a tion Requirements in Genera l 

(UA FOUO) When required by this section, the FD-999 must be used to document assistance to 
other agencies (domestic or foreign) or the dissemination of information, The FD-999 must be 
completed by the FBI division field office, or Legal that provides the assistance or disseminates 
the information. [For example, if an FBI HQ division receives a request for assistance from 
another federal agency and forwards the request to the fie Ed office that can provide the 
assistance, that field office is required to complete the FD-999.) 

(U//FQLTO) W hen an FD-999 i s used to document the “dissemination 1 * of information to another 
agency, it is understood that “assistance*’ was provided to said agency and a separate FD-999 
does not have to be completed to document the assistance to that agency (domestic or foreign). 

12.5. 2 (U) DOCVMEN ta tion REQUIREMENTS for Investiga ti ve ASStSTA N€E 

(including Expert Assistance) to Other Agencies (Domestic or 
Foreign) 

(Li- F0UO) Alatuliititry u\c of the FD-999 : The FD-999 must be used when providing 
investigative assistance, including expert investigative assistance, using an investigative method 
other than those authorized in Assessments to; 

A) (U) USIC Agencies: 

SHU) United Stales Federal Agencies; 

C) (LT) Slate, Local, or Tribal Agencies: or 
Q) (ti) Foreign Agencies. 

i LY/FOUO I Exception : Regardless of investigative methods used, if a request for foreign 
investigative assistance is received directly from a foreign law enforcement or intelligence 
sen ice and is not processed through a Legal or 10 D, written notification documenting the 
foreign investigative assistance request must be provided to the appropriate Legal and 10 D by 
(he FD-999, and IOD must grant approval prior to providing the assistance. 

(U//FOUO) Example : Another federal agency requests the FBI to participate in an interview. The 
FBI does not have an open investigation in the matter. In such circumstances. It es not necessary 
lo complete an FD-999 to document the assistance because the investigative method (interview) 
is authorized for use in Assessments and does not require supervisory approvals or 
documentation. However, if the FD-3Q2 will be disseminated to the requesting federal agency 
then an FD-999 must be prepared. 
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1 2. 53 (U) Documenta tion Req uirfmfnts for Technical Asmsta \cf to Other 

A gencies (Domestic or Foreign ) 

(U//FOUG) AlamUt tprj' me of the FD-999 : The FD-999 must he used when providing any 
technical assistance to; 

A) (U) USIC Agencies; 

3) (U) United Stales Federal Agencies; 

C) (U) State,, Local, or Tribal Agencies; or 
D>(U1 Foreign Agencies. 

12.6 (U) Dissemination of Information to Other Agencies - Documentation 
Requirements 

(U/.TOUO) Dissemination of information to other agencies must be consistent with Director of 
National Intelligence directives, the AGG-Dom. DIOG Section 14, FBI Foreign Dissemination 
Manual, the Privacy Act of 1974, and arty applicable MQU/MOA, law, treaty or other policy. 

(L F’OLQ l Classified information may only be disseminated pursuant to applicable federal law. 
Presidential directive. Attorney General policy and FBI policy. 

(U) The Privacy Act mandates specific documentation of any dissent [nation of information to an 
agency outside the DOJ involving a U,S, Citizen or alien lawfully admitted for permanent 
residence, i.e.. a U.S, person (USPER). 

(U.'VFOUG) Dissemination of information to foreign agencies must be in accordance with the 
FBI Foreign Dissemination Manual, dated May 23, 2008. or as revised, 

(L.FQUOl Mandatory use nf fit e FD-M9 : The FD-999 must be used to document the 
dissemination of all unclassified or classified (up to Secret level! information to: 

A}(U3 USIC Agencies; 

B) (U) United Slales Federal Agencies - when the disseminated information is related to their 
respective responsibilities; 

C) (U) State, Local, or Tribal Agencies * when (lie disseminated information is related to their 
respective responsibilities; or 

DHU) Foreign Agencies. 

(U//FOUO) Note : Dissemination of Top Secret or higher classified information must be 
documented in the appropriate classified file or the Sensitive Compartmented Information 
Operational Network (SCION). 

(L FOUO) Oniivnal use of the E D-999 : The FD-999 is permitted, but is not required to bo- 
used, for the dissemination of information if; 

A) (U//FOUO) the information disscminalcd is being furnished loan agency within the DOJ with 
which the FBI is working a joint investigation; or 
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B) (L7/FOUO) the infimnalton is disseminated with an HR, SIR. or other FBI document (hat is 
maintained in an approved database of records, 

12-7 (U) Records Retention Requirements 

12.7 A (V) USEOFTHEFD-999 

( U//FOUO) All FD-999s must be created an the FBI's ShanePoinl site, This requirement allows 
the FBI to maintain a database to comply with the AGG-Dom, Part FILE, 3 because it will permit, 
with respect to each such activity, the prompt retrieval of the: 

A'KU) Status of the assistance activity (opened or closed)- 

B) (U) die dates of opening and closing; and 

C) (U) the basis for Lhc assistance activity. 

12. 7.2 (U) Uploading we FD-999 

(U//FOUQ) The FD-999 1 must be uploaded to the appropriate file- which may be: 

A) (U) an Assessment tile: 

B) |U) a zero sub^asscssmenl file: 

C) (U) a Predicated Investigation tile; 

D) < LI) a domestic police cooperation file 343 Clarification (the new 343 file classification 
system replaces ihe former 62 classification) as described below; 

EMU) a foreign police cooperation fik- 163 Classification (the revised 163 file classification 
system) as described below; 

F) (U) a zero classification file: or 

G) (U) any other investigative or technical assistance control file using a unique investigative file 
number created by the field office, Legal, or FBIH.Q division to document the dissemination 
of information or assistance to another agency, 

(U//FOUO) These records will assume the N ARA approved retention periods approved for the 
file classification in which they are maintained. 

i 2, 7.3 (U) Request for FD- 9 99 Exemption 

(U//FQUO) FBI entities, 'programs may submit to the Corporate Policy Office tCPO), Director’s 
Office, a written request for an exemption to the mandatory FD-999 requirements contained in 
DIOG Section 12 provided the entity/program maintains a similar database to permit the prompt 
retrieval of the information required above. Thu CFO. in conjunction with personnel from the 
Office of Integrity and Compliance (QIC) and the OGC, will evaluate the exemption request to 
determine database compliance with the AGG-Dom. The CPU will approve or deny the 
exemption request, and maintain a list of all approved exempted enlitics/pnograms. 
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12. 7 A (U//FOUO ) 343 File Classifica tion - Domestic Police Coopera tion 

Files 

(U//FOUO) The former 62 file classification may no longer be utilized to document domestic 
police cooperation. The new 342 file classification system with alpha-designators must be 
utilized to document domestic police cooperation matters. 

2 Z 7.5 (U//FQUQ) 1 63 File Classifica tion - Foreign Police Coopera tion 
Files 

(U//FOUO) The 163 file classification was revised with “new" alpha-designators, The 163 file 
classification system must be utilized to document foreign police cooperation matters. 
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13 (U) EXTRATERRITORIAL PROVISIONS 


13.1 (U) Overview 

(U//FOTJO) The FBI may conduct investigations abroad. participate with foreign officials in 
investigations abroad, or otherwise conduct activities outside the United States. The guidelines 
for conducting investigative activities outside of the United States arc currently contained in: 

A) (U) The Attorney General 's Guidelines for Extraterritorial FBI Operations ami Criminal 
tttv&Hgai tom; 

B) (U) The Attorney General 's Guidelines Jar FBI National Security Investigations and Foreign 
Intelligence Collection (NSIG, Part II, E); 

C) ( U) The Attorney General Guidelines on the Development and Operation of FBI Criminal 
Informants and Cooperative Witnesses iu Extraterritorial Jurisdictions: 

D) (U) The Attorney General Procedure for Reporting and Use of Information Concerning 
Violations of Law ami Authorization far Participation in Otherwise Illegal Activit}> in FBI 
Foreign Intelligence •. Counterintelligence or international Terrorism Intelligence 
Investigations (August 8, I ^88); Had 

E) {Lf) Memorandum of Understanding Concerning Overseas and Domestic Activities of the 
Central Intelligence Agency and the Federal Bureau of Investigation (2005). 

(U//TOUO) Collectively, these guidelines and procedures are referred to ill the DIOG as the 
Extraterritorial Guidelines. 

1 3.2 (U) Purpose and Scope 

(UV/FOUG) As a general rule, the Extraterritorial Guide lines apply when FR! personnel or 
confidential human sources (CHS) are actively engaged in investigative activity outside the 
borders of the United States. In addition, investigative activities that may be undertaken in the 
United States but that have an intrusive effect on the domestic affairs of a foreign country and 
may be considered by the governing authorities of that country to constitute an invasion of its 
sovereignty are governed by the Extraterritorial Guidelines. The following rs a list of such 
activities: 

A) (U//FGUO) Opening a bank account in a foreign financial institution from [he United States 
for the purpose of laundering money; 

B) (U//FOUO) Causing or facilitating the transportation of stolen or counterfeit property into or 
through another country; 

C) (U//FOUOJ Causing or facilitating the transportation of narcotics into or through another 
country; 

D) (U//POUO) Conducting a non-consensual search of a known foreign -based computer, 

E) (U//FOUO) Breaching the security of a known foreign- based computer security system; 

F) (Ui'VFOUO) Opening an undercover business in another country from the United Suues: 
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G) (U/7FOUG) Applying for a permit or license or otherwise making uw of another country's 
government futilities, insii tut ions or processes citing a covert identity; 

H) (U//FOUO) Facilitating a person's unlawful entry into another county by creating false 
documental too; 

l) (U//FOUO) Consensual monitoring of communications with a senior foreign government 
official involving the official's duties or misuse of his/her office: and 

J) (U//FOUO) Any other investigative activity that, although it is conducted from the United 
States, is likely to create the same level of intrusion as the activities listed above or for other 
reasons, has the reasonable potential to adversely impact United States foreign relations, 

(UFOUO) FBI personnel planning to engage in any of the investigative activities described in 
the subsection above must obtain the concurrence of the appropriate Legal Attache (Legal) and 
must comply with the remaining procedural requirement of the Extraterritorial Guidelines, which 
may be found in the classified provisions in DIOG Appendix G. 

13.3 (U) Joint Venture Doctrine 

(U/v'FOL'G) The "'joint venture’" doctrine provides that in certain eirenmslanccs. Fourth or Firth 
Amendment rights may attaeh and evidence seized overseas, including statements of a defendant 
may be subject to suppression if the foreign law enforcement officers did not comply with U.S. 
law, A determination that adjoint venture 8 * exists require* a finding of "active" or "substantial" 
involvement by U.S, agents in the foreign law enforcement activity, Because 1 the determinal ion 
will be fact specific and very few eases illuminate what constitutes '‘active" or "substantial" 
participation, FBI employees should contact their GDC or OGC for guidance. See also Chanter 
35. DOJ Federal Narcotics Manual [March 201 1 ) available on the DOJ intranet. 

13.4 (U) Legal Attach^ Program 

(U//FGUO) The foundation of the FBI’s international program is the Legal. Each Legal is the 
Director’s personal representative in the foreign countries in which he/she resides or lias regional 
responsibilities. The Legat’s job is lo respond to the FBI’s domestic and extraterritorial 
investigative needs. Legals can accomplish this mission, because they have developed 
partnerships and fostered cooperation with Elieir foreign counterparts on every level and are 
familiar wi rh local investigative rules, protocols, and practices which differ from country to 
country. For additional information consult the FBI] IQ IOD website . 
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14 (U) RETENTION AND SHARING OF INFORMATION 


14.1 [U) Purpose and Scope 

(Uv/FOIJO) Every FBI component is responsible for the creation and maintenance of authentic, 
reliable, and trustworthy records. (Note: If the originator of information, reported to the FBI 
characterizes an individual, group, or activity in a certain way and that characterization should be 
documented for completeness of the FBI record, the FBI record (i.e„ 302, EC, LHM f etc.) should 
re fled that another party, and not the FBI* is the originator of the characterization). Without 
complete and accessible records, the FBI cannot conduct investigations, gather and analyze 
intelligence, assist with the prosecution of criminals, or perform any of its critical missions 
effectively. 

(U//FGUO) The FBI is committed to ensuring that its records management program 
accomplishes the follow ing goals; 

A) (U//FOUO) Facilitates (he documental ion of official decisions, policies, activilics* and 
transactions; 

B) (U//FOUO) Facilitates ihc timely retrieval of needed information; 

C) (U//FOUO) Ensures continuity of FBI business; 

D) (U/VFOUOJ Controls the creation and growth of FBI records; 

E) (U/.'TOUO) Reduces operating costs by managing records according to FBI business needs 
and by disposing of unneeded records in a timely manner 

F) (U//FQUO) Improves efficiency and productivity through effective records storage and 
retrieval methods; 

G) (UtfFGUO) Ensures compliance with applicable laws and regulations; 

H) (U4TOIJO) Safeguards the FBI's mission-critical information; 

l) (LV/FOUO) Preserves the FBI’s corporate memory and history; and 

J) (U//FQUO) Tmplemenls records munagemcnl technologies to support ail of the goals listed 
above. 

£U) Note : The hardcopy file is the '"official file* 1 at the present time and a hardcopy of ail 
electronic or on-line forms or documents must be printed and serialized into the field office or 
FRIHQ hardcopy file, 

14.2 (U) The FBI's Records Retention Plan, and Documentation 

(U//FGUG) The FBI must retain records relating to investigative activities according to the FBI’s 
records retention plan that has been approved by the National Archives and Records 
Administration (KARA). (AGG-Dom. Part VJ,A,l) 

(U//FOUO I The FBI’s disposition authorities provide specific instructions about the length of 
time that records must be maintained. In some instances, records may be destroyed after a 


14-1 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Virrsiun bated- 
Ondim- in.ZUll 



UNCLASSIFIED * FOR OFFICIAL USE ONLY 
§ 1 3 Domestic In vcsii gat ions and Operations Guide 

G) (U//FOUQ) Applying for a permit or license or otherwise making use of another country L s 
government facilities, institutions nr processes using a covert identity; 

H) fU/TOUQ) Facilitating a person's unlawful entry into another county by creating false 
documentation; 

H (U//FOUO) Consensual monitoring of communications wish a senior foreign government 
official involving the official's duties or misuse of his/her office; and 

J* (U//FOUD) Any other investigative activity that, although it is conducted from the United 
States, is likely to create the same level of intrusion as the activities listed above or, for other 
reasons, has the reasonable potential to adversely impact United States foreign relations. 

(U//FOUO) FBI personnel planning to engage irt any of the investigative activities described in 
the subsection above must obtain the concurrence of the appropri ate Legal Attache (Legal* and 
must comply with the remaining procedural requirement of the Extraterritorial Guidelines* which 
may be found in the classified provisions in DIOG Appendix G. 

13.3 [U) Joint Venture Doctrine 

(U//FQUO) The "joint venture" doctrine provides that in certain circumstances. Fourth or Fifth 
Amendment rights may attach and evidence seized overseas, including statements of a defendant, 
may be subject to suppression if the foreign law enforcement officers did not comply with U S. 
law, A determination that a “joint venture" exists requires a finding of “active" nr “substantial" 
involvement by U.S. agents in the foreign law enforcement activity. Because the determination 
will be fact specific and very few eases illuminate what constitutes "active" or "substantial" 
participation, FBI employees should contact their GDC or GGC for guidance. See also Chapter 
35. DOJ Federal Narcotics Manual (March 2011) available on the DOJ intranet. 

13.4 (U) Legal Attache Program 

(U//FOUD) The foundation of the FBTs international program is the Legal, Each Legal is the 
Director's personal representative in the foreign countries in which he/she resides or has regional 
responsibilities. The Legal's job is to respond to the FBI's domestic and extraterritorial 
investigative needs. Legate ear accomplish this mission because they have developed 
partnerships and fostered cooperation with their foreign counterparts on every level and are 
familiar w ith local investigative rules, protocols, and practices which differ from country to 
country. For additional information consult the FBI HQ IOD website . 
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14 (U) RETENTION AND SHARING OF INFORMATION 


14,1 fy) Purpose and Scope 

(U//FQUG) Every FBI component is responsible for the creation and maintenance of authentic, 
reliable, and trustworthy records, (Note: If the originator of information reported k> the FBI 
characterizes an individual, group, or activity in a certain way and that characterization should be 
documented for completeness of the FBI record, the FBI record (i.e. ? 302, F,C. LHM, etc.) should 
reflect that another party, and not the FBI es the originator of the characterization). Without 
complete and accessible records, the FBI cannot Conduct investigations, gather and analyze 
intelligence, assist with the prosecution of criminals, or perform any of its critical missions 
effectively 

(LN/FQUO) The FBI is committed to ensuring that its records management pr ogram 
accomplishes the following goals: 

A) (U//FGUO) Facilitates the documentation of official decisions, policies, activities, and 
transactions: 

B) (U//FOUO) Facilitates She timely retrieval of needed information; 

C) (U//FOUO) Ensures continuity of FBI business: 

D) (U//FOUO) Controls the creation and growth of FBI records; 

E) (U//FOUG) Reduces operating costs by managing records according to FBI business needs 
and by disposing of unneeded records in a timely manner; 

F) (U/.''FOUO) Improves efficiency and productivity through effective records storage and 
retrieval methods: 

G) (U//FOUO) Ensures compliance with applicable laws and regulations: 

H} (U//FOUO) Safeguards the FBI's mission-critical information; 

I) (U//FOUO) Preserves She FBI's corporate memory and history; and 

J) (U//FOUO) Implements records management technologies, to support all of the goals listed 
above, 

(U) Note: The hardcopy file is the “uffieial fik"' at the present time and a hardcopy of all 
electronic or on-line forms or documents must be printed and serialized into the field office or 
FBIHQ hardcopy file. 

14, Z (0) The FBI's Records Retention Plan, and Documentation 

(U/'FOUO) The FBI must retain records relating to investigative activities according to the FBI's 
records retention plan that has been approved by the National Archives and Records 
Administration (NARA). (AGG-Dom, Part V{,A. ! I 

(U//FOUO) The FBI's disposition authorities provide specific instructions about the- length of 
time that records must be maintained. In some instances, records may be destroyed after a 
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prescribed period of time has elapsed. Other records are never destroyed and are transferred to 
NARA a certain number of years after an investigation is dosed 

14-2,1 (V) Da tabase or Records System 

(U//FOUO) The FBI must maintain a database or records system that permits, with respect to 
each Predicated Investigation, the prompt retrieval of the status of the investigation (open or 
dosed), the dates of opening and closing, and the basis for the investigation. (AGG-Dom, Part 
VLA.2) 

(U//F0UQ) The Fill's official File Classification System covers records related to all 
investigative and intelligence collection activities, including Assessments, Records must be 
maintained in the FBI’s Central Records System, or other designated systems of records, which 
provides the required maintenance and retrieval functionality, 

14.2.2 (U) Records Management Division Disposition Plan and Retention 

Schedules 

(U//FOUG) (U//FOUO) All investigative records, whether from Assessments or Predicated 
Investigations, must be retained in accordance with the Records Management Division 
Disposition Plan and Retention Schedules. No records, including those generated during 
Assessments, may be destroyed or expunged earlier than the destruction schedule without written 
approval from NARA, except in "expungement" circumstances as further described in RMD 
policy. Records, including those generated during Assessments, may not be retained longer than 
the destruction schedule unless otherwise directed by RMD to include, ‘litigation hold" 
circumstances as described in RMD policy. Sec the RMD webpage and 
h ttp:/ ’h ome. lb i n et, fh i/ Dt > R M I ) R PA S 1 R DU 7 Pages/RccoftlFreezcsl Holds ) Li [ igation FreezeLi st.a 
sp\. In the event an office believes they need to retain records beyond iltcir destruction schedule, 
they should contact RMD for further guidance. 

14.3 [LI) INFORMATION SHARING 

(U.'VFQUO ) The FBI 2008 National I nformation Sharing Strategy ( N1SS) provides the common 
vision* goals* and framework needed to guide information sharing initiatives with our federal, 
state, local* and tribal agency partners, foreign government counterparts, and private sector 
stakeholders. The FBI NISS addresses the cultural and technological changes required to move 
the FBI to “a responsibility to provide" culture. 

14.3.1 (U) Permissi ve Sharing 

(W/FOUO) Consistent with the Privacy Act, FBJ policy, and arty Other applicable laws and 
memoranda of understanding or agreement wfilh other agencies concerning the dissemination of 
information, the FBI may disseminate information obtained or produced through activities under 
the AGG-Dom: 

A){UtfFOUG) Within the FBI and to all cither components of the DGJ if the recipients need the 
information in the performance of their official duties, 
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B} (U//FOUO) To other federal agencies if disclosure is compatible with the purpose tor which 
the information was collected and it is related Id their responsibilities. In relation lo other 
USIC agencies, the determination whether (he information is related to the recipient 
responsibilities tnay he Jefi; lo the recipient. 

C> (U//FOUO) To slalc. local, or Indian tribal agencies directly engaged in the criminal justice 
process when access is directly related to a law enforcement function of the recipient agency. 

D) (U//FOUO) To Congress or to congressional committees in Coordination with the FBI Office 
of Congressional Affairs {OCA) and the DOJ Office of Legislative Affairs 

E) (U//FOUQ) To foreign agencies if the FBI determines that the information is related lo (heir 
responsibilities:. the dissemination is consistent with (he interests of the United States 
(including national security interests); consideration has been given to the effect on any 
identifiable U5PER; and disclosure iscompaLible with the purpose lor which the information 
wm collected 

F) (U//FOUO) If the information Is publicly available, does nu[ identify USFERs, oris 
disseminated with the consent of the person whom it concerns. 

G) (UWFOUG) If the dissemination Is necessary to protect the safety or security of persons or 
property, to protect against or prevent a crime or threat to the national security, or to obtain 
information for the conduct of an authorized FBI investigation. 

HHU^FOUQ) If dissemination of the information is otherwise permitted by the Privacy Act (5 
U.S.C.§ 552a) (AGG-Dom, Fart VI.B.I) 

(U//FOUO) All FBI information, sharing activities under this section shall be done in accordance 
with Corporate Policy Directive I 2D . 4 "FBI Sharing Activities with Other Government 
Agencies/' and Corporate Policy Directive QyD “Protecting Privacy in the Information Sharing 
Environment, 1 ’ and any amendments thereto and applicable succeeding policy directives. 

14.3.2 (V) Required Sha ring 

(U//FOUO) The FBI must share and disseminate information as required by law and applicable 
policy. Working through the supervisory chain and other appropriate entities, FBI employees 
must ensure compliance with statutes, including the Privacy Act, treaties. Executive Orders. 
Presidential directives, National Security Council (NSC) directives. Homeland Security Council 
(H5C) directives. Director of National Intelligence directives. Attorney General-approved 
policies, and MOUs or MOAs, 

14,4 {U) Information Related to Criminal Matters 

14.4.1 (U) COORDINA TING WITH PROSECUTORS 

(U//FOUQ) In an investigation relating to possible criminal activity in violation of federal law. 
the FBI employee conducting the Investigation must maintain periodic written or oral contact 
with the appropriate federal prosecutor, as circumstances warrant and as requested by the 
prosecutor. When, during such an investigation, a matter appears arguably to warrant 
prosecution, the FBI employee must present the relevant facts to the appropriate federal 
prosecutor, Information on investigations that have been dosed must be available on request L> a 
United States Attorney (USA) or his or her designee or an appropriate DOJ official (AGG-Dom, 
Part VI C ) 
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14,4,2 (U) C RIMMA L MA TTERS OUTSIDE FBI JURISDICTION 

(U/ZFOUGj When credible information is received by an FBI employee concerning serious 
criminal activity not within the FBI's investigative jurisdiction, the FBI employee must promptly 
transmit the information or refer the complainant to a law enforcement agency having 
jurisdiction, except when disclosure would jeopardize an ongoing investigation, endanger the 
safety of an individual, disclose the identity of a CHS, interfere with the cooperation of a CHS, 
or reveal legally privileged information. If full disclosure is not made for ary of the reasons 
indicated, then, whenever feasible, the FBI employee must make at least limited disclosure to a 
law r enforcement agency or agencies having jurisdiction, and lull disclosure must be made as 
soon as the need for restricting disclosure is no longer present. Where full disclosure is not made 
to the appropriate law enforcement agencies within ISO days, the FBI employee/ field office must 
promptly notify FBIHQ in writing of the facts and circumstances concerning the criminal 
activity. The FBI must make periodic reports to the Deputy Attorney General of such non- 
disclosures and incomplete disclosures, in a form suitable to protect the identity of a CHS. 
(AGG-Dom, Part Vl.C) 

14.43 (U) Reporting Cmminal A cti vm of an FBI Employee or CHS 

(U//FOUG) When it appears that an FBI employee has engaged in criminal activity in the course 
of an investigation, the FBI must notify the US AO or an appropriate DOJ division, W r hen it 
appears that a CHS has engaged in criminal activity in the course of an investigation, the FBI 
must proceed as provided in the AGG-CHS . When information concerning possible criminal 
activity by any other person appears in (he course of an investigation, the FBI may open an 
investigation of the criminal activity if warranted, and must proceed as provided in Section 1 4.4, 1 
and 14,4.2 above, | AGG-Dom, Part V1.C.3) 

(U//FQUO) The reporting requirements under this paragraph relating to criminal activity by an 
FBI employee or a CHS do not apply to otherwise illegal activity that is authorized in conformity 
with the AGG-Dom or other Attorney General guidelines or to minor traffic offenses. ( AGG- 
Dom, Part Vl.C. 3) 

14.5 (U) Information Related to National Security and Foreign 

Intelligence Matters 

(U.//FOUO} All information sharing with a foreign government related to classified national 
security and foreign intelligence must be done in accordance with the FBI Foreign Dissemination 
Manual and effective policies governing MO Us. 

(U//FQUO) The general principle reflected in current law and policy is that there is a 
responsibility to provide information as consistently and fully as possible to agencies with 
relevant responsibilities to protect the United States and its people from terrorism and other 
threats to the national security, except as limited by specific constraints on such sharing. The 
FBI's responsibility in ibis area includes carrying out the requirements of the MGU Between the 
Intelligence Community, Federal Law Enforcement Agencies, and the Department of Homeland 
Security Concerning Information Sharing (March 4, 20€3). or any successor memorandum of 
understanding or agreement, Specific requirements also exist for internal coordination and 
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consultation with other DOJ components, and for sharing national security and. foreign 
intelligence information with White House agencies, as provided below. (AGG-Dom, Fart VI. D) 

14.5*1 (U) Department of Justice 

(U//FQUO) The DOJ National Security Division (NSD) must have access to all information 
obtained by the FBI through activities relating to threats to the national security or tbreign 
intelligence. The Director of the FBI and the Assistant Attorney General for NSD must consult 
concerning these activities whenever requested by either of them, and the FBI must provide sueh 
reports and information concerning these activities as the Assistant Attorney General for NSD 
may request. In addition to any reports or information the Assistant Attorney General for NSD 
may specially request under this subparagraph, the FBI must provide annual reports to the NSD 
concerning its foreign intelligence collection program, including information concerning the 
scope and nature of foreign intelligence collection activities in each FBI field office. {AGG- 
Dom, Part VI.D.I) 

(UAFOLFO) The FBI must keep the NSD apprised of all information obtained through activities 
under the AGG-Dom that is necessary to (he ability of the United States to Investigate or protect 
against threats to the national security: this should be accomplished with regular consul tat ions 
between the FBI and the NSD to exchange advice and information relevant to addressing such 
threats through criminal prosecution or other means. (AGG-Dom, Part VI.D.I) 

(U//FOUO) Except for counterintelligence investigations, a relevant LrSAO must have aceess to 
and must receive information from the F'Bl relating to threats to the national security, and may 
engage in consultations with the FBI relating to such threats, to the same extent as the NSD. The 
relevant USAQ must receive such access and in formation from the FBI field offices, (AGG- 
Dom, Part VI.D.I) 

(U//FOUG) In a counterintelligence investigation - i.c.„ an investigation of espionage or other 
intelligence activities, sabotage, or assassination, conducted by, for T or on behalf of foreign 
powers, organizations, or persons [AGG-Dom, Part VII. SJ]- the FBI may only provide 
information to and consult with a relevant US AO if authorized to do so by [he NSD. Until the 
policies required by AGG-Dom. Part VI, D, Ld are promulgated, the FBI may consult freely with 
the US AO concerning investigations within the scope of this subparagraph during an emergency, 
so Song as the NSD is notified of such consultation as soon as practicable after the consultation, 
(AGG-Dom, Part VLD.I). 

(U//FOUG) Information shared with a USAO pursuant to DIOG Section 14.5 (National Security) 
must be disclosed only to the USA or any A USA designated by the USA as points of contact to 
receive such information. The USA and designated AUSA must have an appropriate security 
clearance and must receive training in the handling of classified information and information 
derived from FLSA„ including training concerning the secure handling and storage of such 
information and training concerning requirements and limitations relating to the use, retention, 
and dissemination of such information. (AGG-Dom, Part Vl.D. I) 

(U//FOUQ) The disclosure and sharing of information by the FBI under this paragraph is subject 
to any limitations required in orders issued by the FISC, controls imposed by the originators of 
sensitive material, and restrictions established by the Attorney General or the Deputy Attorney 
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General in particular investigations. The disclosure and sharing of information by the FBI under 
this paragraph that may disclose the identity of a CHS is governed by the relevant provisions of 
the AGG-CHS. (AGG-Dom, Part VED.l) 

14.5.2 (U) The White House 

(U//FOUO) In order to carry out their responsibilities, the President, the Vice President, the 
Assistant to (he President for National Security Affairs, the Assistant to the President for 
Homeland Security Affairs, the NSC and its staff, the HSC and iLs staff, and other White House 
officials and offices require information from all federal agencies, including foreign intelligence, 
and information relating to international terrorism and other threats to the national security. 
Accordingly, the FBI may disseminate to the White House foreign intelligence and national 
security information obtained through activities under the AGG-Dom, subject to the following 
standards and procedures. 

14.5.2.1 (U) Requests sent through NSC or HSC 

(U//FQUQ) The White House must request such information through the NSC staffer HSC 
staff including, but not limited to, the NSC Legal and Intelligence Directorates and Office of 
Combating Terrorism, or through the President’s Intelligence Advisory Board or the Counsel 
to the President. ( AGG-Dom. Part VI.D.2.S) 

(U//FOUO) If the White House sends a request for such information to the FBI without first 
sending the request through the entities described above, the request must be returned to the 
White House for resubmission. 

14.5.2.2 (U) Approval by the Attorney General 

(U//FOUO) Compromising information concerning domestic officials or domestic political 
organizations, or information concerning activities of USPERs intended to affect the political 
process in the United States, may be disseminated to the White House only with the approval 
of the Attorney General, based on a determination that such dissemination is needed lor 
foreign intelligence purposes, for the purpose of protecting against international terrorism or 
other threats Lu the national security, or for the conduct of foreign affairs. Such approval is not 
required., however, lor dissemination to the White House of information concerning efforts of 
foreign intelligence services to penetrate the White House or concerning contacts by While 
House personnel with foreign intelligence service personnel. {AGG-Dorn, Part VLD,2.b) 

14.5.2 .3 (U) Information S uitaull for d iss m i nation 

(UVFOUO) Examples of the type of information that is suitable for dissemination to the 
White House on a routine basis includes, but is not limited lo {AGG-Dom, Pan VI.D.2*c): 

A) (U//FQUO) Information concerning international terrorism; 

Bj {U//FOUQ) Information concerning activities of foreign intelligence services in the United 
Slates; 

C) (U//FGUO) Information indicative of imminent hostilities involving any Foreign power; 

D) (U//FQUQ) Information concerning potential cyber threats lo Lhe United Slates or its allies; 
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E) (UjVFOUO) Information indicative of policy positions adopted by foreign officials, 
governments, or powers, or their reactions to United Slates foreign policy initiatives; 

F) (U/flFOOO) Information relating to possible changes in leadership positions of foreign 
governments, parties, factions, or powers; 

G) (U.'VFDUO) Information c unarming foreign economic or foreign political matters that might 
have national .security ramifications; and 

H) (U//FOUO) Information set forth in regularly published national intelligence requirements. 

14,5,2,4 (U) Notification of Communications 

(U//FOUO) Communications by the FDt to the White House thal relate to a national security 
matter and concern a litigation issue fora specific pending, investigation must be made known 
to the Office oT the Attorney General, the Office of the Deputy Attorney General, or the 
Office of the Associate Attorney General, White House policy may limit or prescribe the 
White House personnel who may request information concerning such issues from the FBI. 
(AGG-Dom Part VLRZtJ) 

1 4,5.2, s [U] Dissemination of Information relating to Background Investigations 

(U//FGUO) The limitations on dissemination of information by the FBI to the White House 
under the AGG-Dom do not apply to dissemination to the White House of information 
acquired in the course of an FBI investigation requested by the White House into the 
background of a potential employee or appointee, or responses to requests from the White 
House under E.O. 10450 relating to security requirements for government cmploymcnt. 
(AGG-Dom, Part VLD.2.p) 

14, S3 ( V) Congress 

(U//FGUG) FBI employees must work through supervisors and the FBI OCA to keep the 
congressional intelligence committees fully and currently informed of the FBI's intelligence 
activities as required by the National Security Act of 1947, as amended, Advice on what 
activities fall within the supra of required congressional notification can be obtained from OCA 
[A Corporate Policy Directive is forthcoming], 

14.6 (U) Special Statutory Requirements 

(U) Information acquired under the FISA may be subject to mi nimization procedu res and other 
requirements specified in that Act. (AGO- Dorn, Part VLD.3.a) 

fU) Information obtained through Ihe use of National Security Letters (NSLsj under 15 LLS.C, $ 
ISBlv (full credit reports) may be disseminated in conformity with the general standards of 
AGG-Dom. Part Vf, and DIOG Section 18.6.6.6,1.8. Information obtained through the use of 
NSLs under other statutes may be disseminated in conformity with the general standards of the 
AGG-Dom, Part VI, subject to any specific limitations in the governing statutory provisions (see 
DIOG Section 18): 1 2 D S C. § 3414(a)(5)(B); 1 5 U.5.C § |6Slu(f|; 18 U.S.t § 2709(d); 50 
U.S.C. $ 43fr[c). [AGG-Dom, Part VLDJ.b) 
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(U) Federal Rule of Criminal Procedure 6(e) generally prohibits disclosing ''mailers tseeurring 
before the grand jury. 1 ' This includes documents, records, testimony of witnesses, or any other 
evidence deemed relevant by a sitting grand jury. The Attorney General lias issued revised 
Guidelines for the Disclosure and Use of Grand Jury In format! on under Rule 6(eW3HDL On May 
15, 200S. the Deputy Attorney General issued a memorandum which provides amplifying 
guidance as to lawful use and disclosure of 6(e) information, See also AGG-Dom* Part V.A.8 
and DIOG Section 18,6.5 3. 7.4.5. 

14.7 [Uj Threat To Life - Dissemination Of Information 

14 . 7.1 (U) Overview 

(U//FGUQ) The FBI has a responsibility to notify persons of threats to their life or threats that 
may result in serious bodily injury- and to notify- other law enforcement agencies of such threats 
(Extracted from DQJ Office of Investigative Policies, Resolution. 20, dated 1 2. 1.6/96), Depending 
on the exigency of the situation, an employee, through their supervisor, should notify the 
appropriate operational division at FBIHQ of the existence of the threat and iltc ptan for 
notification. That plan may be tbl lowed unless advised to the contrary by FBI HQ. 

14.7.2 (U//FOUO ) Inform a tion Recei i fed through FISA Surveillance 

(U//FOUQ) If information is received through a FISA-authorized investigative technique 
indicating a threat to life or serious bodily harm within the scope of Section 14.7, the lietd office 
case agent responsible for that FISA must immediately coordinate the matter with the FBI HQ 
SSA responsible for that investigation and an NSLB attorney from the applicable 
counterintelligence or counterterrorism law unit, These individuals must consult the applicable 
FISA minimization procedures, consider the operational posture of the investigation, and 
collectively determine the appropriate manner in which to proceed. FBI executive management 
maybe consulted, as appropriate {e.g.. if DIDO or declassification authority is needed). The field 
office case agent must document the dissemination. If the decision is made not to disseminate the 
threat information, that decision must he approved by an ASAC or higher and the reasons must 
he documented in the applicable investigative file. 

1 4, 73 (U) DlSSFMINA TION OF INFORM A TION CONCERNING THRFA TS AG A INST 

Intended Victims (Persons) 

147.3.1 [U] Warning to the Intended Victim (Person) 

14.7.3.1.1 (U) Expeditious Wa rnincs to Identifiable Intended Victims 

(U//FOUO) Except as provided below in Sections 14.7.3.1 .1 ,1 (Exceptions) and 14.7.3.1.2 
(Custody or Protectee), when an employee has information that a person who is identified or 
can be identified through reasonable means (hereafter a ‘intended victim”) is subject to a 
credible threat to his/her life or of serious bodily injury, the FBI employee musl attempt 
expeditiously to warn the intended victim of the nature and extent of the threat. 
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1 4*7,3, 1,1.1 <U> E XCE PTION5 TO WARN INC 

(U//FOUG) An employee is got required in warn an intended victim if ; 

A) (U//FOU0) providing the warning to the intended victim is Likely to cause equal or greater 
physical harm to one or more persons: * or 

B) (U//FOUO) the intended victim knows the nature and extent of the specific threat against 
him/her, 

14.7.3,1,1,2 <u> Means, Manner, and Documentation of 

Warning/Notification or Decision Not to Warn 

(U//FOUO) The FBI employee, in consultation with his or her supervisor, rrrnsl determine the 
means and manner of the warning, using the method most likely to provide direct notice to the 
intended victim. In some cases, this may require the assistance oTa third party. The employee 
must document on an FD-999 the content of the warning, as well as when, where and by 
whom it was delivered to the intended victim. The FD-999 must be placed in a zero file or if 
investigative methods are used, the appropriate investigative file. 

(U//FOUO) The employee* in consultation with his or her supervisor, may seek the assistance 
of another law enforcement agency lo provide the warning. If this is done, the employee must 
document on an FD-999 that notice was provided by that law enforcement agency, as well as 
when, where and by whom (i.e., the name of the other agency's representative) it was 
delivered. The employee must also document the other agency's agreement to provide a 
timely warning. The FD-999 must be filed as specified above. 

(U//FOUO) Whenever time and circumstances permit, an employee's decision not to provide 
a warning in these circumstances must he approved by an AS AC or higher. In all cases, the 
reasons for not providing a warning must be documented by EC or simi lar successor form in a 
zero file or if investigative methods are used, the appropriate investigative file. 

1 4 r 7,3, 1,2 (U) Wa hnincs When Intended Victim is in Custod ¥ on is a Protectee 

(U//FOUQ) When an employee has information that a person described below is an intended 
victim, the employee, in consultation with his or her supervisor, must expeditiously notify the 
law enforcement agency that has protective or custodial jurisdiction of the threatened person. 

(U//FQUO) This section applies when the intended victim is: 

A) (U//FOUO) a public official who, because of his/her official position, is provided a protective 
detail; 

B) (U//FQUQ) a participant in [he Witness Security Program that is administered by the United 
States Marshals Service; or 

C) (LV/FOUO) detained or incarcerated. 


H [U// FOLIO] IF the equal or greater harm would occur tu a Government informant or Agetti as a result of 
his/her participation in an investigation, consideration should be given to extricating that individual from the 
investigation or taking other appropriate measures in order to minimize the risk. 
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(U//FOUQ) This paragraph does not apply to employees serving on the security detail of the 
FBI Director or any other FBI protected persons when the threat is to the individual they 
protect 

14.73.1.2.1 (U) Mu, vims. Manner, ani> Documentation he 
W arning/Noti fig ation 

(U//FOUO) The employee, in consultation with his or her supervisor, may determine the 
means and manner of the notification. When providing notification, the employee shall 
provide as much information as possible regarding the threat and the credibility of the threat 
The employee must document on an FD4W what he or she informed the other law 
enforcement agency, and when, where, how (e.g., telephone call, email) and to whom the 
nolice was delivered. The FD-999 must be placed in a zero file or if investigative methods are 
used, the appropriate investigative file. 

14.7.3.2 [U) Notification to Law Enforcement Agencies That Have Investigative 
Jurisdiction 

1 4, 7, 3, 2, I (U) Expedi tioos Ngtifica non 

14.7.3.2.1.1 (U) Threats* TO Intended Persons 

(LV/FOUO) Except as provided in Sections 14.7.3.2.2, when an employee has information that 
p person (other than a person described above in Section 14.7.3. 1.2) who is identified or can 
be identified through reasonable means is subject to a credible threat to his/her life or of 
serious bodily injury, the employee must attempt expeditiously to notify other law 
enforce ment agencies that have investigative jurisdiction concerning the threat. 

1 4 .7.3.2 . 1 .2 (II) Threats to Occu pj ed Structures or Con v eva nc es 

(U//FOUO) When an employee has information that a structure or conveyance which can be 
identified through reasonable means is the subject of a credible threat which could cause a 
loss of life or serious bodily injury to its occupants^ the employee, in consultation with his or 
her supervisor, must provide expeditious notification to other law enforcement agencies that 
have jurisdiction concerning the threat, 

1 4. 7. 3. 2. 2 ( U) Exceptions to Notifica tion 

(U//FOUO) An employee need not attempt to notify another law enforcement agency that has 
investigative jurisdiction concerning a threat: 

A) (U7FQUQ) when providing the ddtiffcatiufl to (he olher law' enforcement agency is likely it? 
cause equal or greater physical harm to one or more persons; or 

B) (U//FUUO) when The ultier law enforcement agency knows the nature and extent of the 
specific threat to (he intended victim. 

(LV/FOUO) Whenever time and circumstances permit, an employee's decision not to provide 
notification to another law- enforcement agency in the foregoing circumstances musl be 
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approved by an A SAC or higher, In ail cases, the reasons for an employee's decision not to 
provide notification must be documented in writing in a zero file or if investigative methods 
are used, the appropriate investigative file. 

1 4. 7.3,2. 3 Means , Ma vvew, and Dqcumenta tion of No tifica tion 

(U//FOUO) The employee may determine the means and manner of the notification. The 
employee must document in writing in the applicable investigative file the content of the 
notification, and when, where, and to whom it was delivered, 

1 4. 7. 4 (U//FOUO) Dsssemsna tion of Inform a tion Concerning Threa ts. 
Possible Violence or Oemonstra tions Against Foreign 
Establishments or Officials in the United States 

(U//FOUO) If information is received indicating a threat to life within the scope of Section 14.7, 
or possible violence or demonstrations against foreign establishments or officials in the United 
States, the field office case agent must immediately coordinate the matter with the FBIHQ SSA 
responsible for the case, who must notify the Department of Stale (DOS)* United States Secret 
Service (USSS)* and any other Government agencies that may have an interest. See Section IV 
of the 1973 FBI USSS MOU, which is available at 

http:/. 1 home, flai iiet.1 n bi/DQ/OGC/Memorandunts%20o P&2Q U nderstandi ne/ss- 
protective_res.ponsibilities.pdf for the FBI’s information sharing responsibilities with the USSS 
in such cases. 

14.7.5 (U) DiSSEMtNA TION OF Informa TION Concerning Threa TS A GAINST THE 
President and O ther Design a ted Officials 

(U//FGUO) The United States Secret Serviee (USSS) has statutory authority to protect or to 
engage in certain activities to protect the President and certain other persons as specified in 18 
U.S.C, $ 3056, An MQU between the FBI and USSS specifies the FBI information that the 
USSS wants to receive in connection with its protective responsibilities. 

(U.'VFOUO) Detailed guidelines regarding threats against the President of the United Slates and 
other USSS protectees can be found in n Presidential and Presidential Staff Assassination* 
Kidnapping and Assault. 1 ' (Sec the Violent Crimes FG ) 
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IS (UJ INTELLIGENCE ANALYSIS AND PLANNING 


15.1 (U) Overview 

(U//FQUO} The Attorney General's Guidelines for Domestic FBI Operations ( AGG-Dom) 
provide specific guidance and authorization for intelligence analysis and planning. This authority 
enables the FBI to identify and understand trends* causes* and potential indicia of criminal 
activity and other threats to the United States that would not be apparent from the investigation 
of discrete matters alone, By means of intelligence analysis and planning* the FBI can more 
effectively discover criminal threats* threats to the national security, and other matters of national 
intelligence interest, and can provide the critical support needed for the effective discharge of its 
investigative responsibilities and other authorized activities. (AGG-Dom, Part IV) 

(U//FOLIO) In carrying out its intelligence analysis and planning functions, the FBI is authorized 
to draw on all lawful sources of information, including analysis of historical information in FBI 
Hies {open and closed}* records and database systems, and information collected from 
investigative activities permitted without opening an Assessment set forth in DlOG Section 
5,1.1. 

(V FCJUO} Nate : In the DlOG, the word ‘‘assessment*’ has two distinct meanings. The AGG- 
Dom authorizes as an investigative activity an ■‘Assessment*’* which requires an authorized 
purpose as discussed in DlOG Section 5 . The United States Intelligence Community (USICj* 
however* also uses the word “assessment*' to describe written intelligence products, as discussed 
in Section 1 5,6. 1.2 below . 

15.2 (U) Purpose and Scope 

1 5 , 2, 1 (U) Functions A uthorized 

iL" FQU0) The AGG-Dom authorizes the FBI to engage in intelligence analysis and planning to 
facilitate and support investigative activities and other authorized activities. The functions 
authorized include: 

A) i U.VFGUO) Development of overviews and analyses concerning threats to and vulnerabilities 
of the United States and its interests, such as domain management as related to die FBI's 
responsibilities; 

B) CU//FOUO) Research and analysis lo produce reports and assessments (.analytical products) 
concerning matters derived from or relevant to investigative activities or other authorized FBI 
activities; and 

€} (U//FOUO) The operation of intelligence and information systems that facilitate and support 
investigations and analysis through the compilation and analysis of data and information on an 
ongoing basis. (AGG-Dom* Introduction 
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15.2.2 (U) Integra tion of Intel licence A ctivities 

(U//FOUO) In order to protect against national security and criminal threats through intelligence- 
driven operations, the FBI should integrate intell igence activities into all investigative efforts by: 

A) IU//FQUG) Systematically assessing particular geographic areas or sectors to identify 
potential threats, vulnerabilities, gaps, and collection opportunities in response to FBI 
collection requirements dial support the broad range of FBI responsibilities’ 

Bl (UYFOUQ) Proactively directing resources to collect against potential threats and other 
matters of interest to the nation and the FBI, and developing new collection capabilities when 
needed; 

C} (U//FCNJO) Continuously validating collection capabilities to ensure information integrity ; 

D) (U//FOUG) Deliberately gathering information in response to articulated priority intelligence 
requirements using all available collection resources, then expeditiously preparing the 
collected inl'ormation for analysis and dissemination and promptly disseminating it to 
appropriate partners at the local, state, national and foreign level: and 

E) (U//FGUO) Purposefully evaluating the implications of collected information on current and 
emerging threat tssues. 

1 5 , 2,5 (U) A nal ysis and Pla nning Not Requiring the Opening of an 

Assessment (See DIOG Section 5) 

(U//FOUO) Without opening an Assessment, an FBI employee may produce written intelligence 
products that include, but are not limited to, an Intelligence Assessment [analytical product). 
Intelligence Bulletin and Geospatial Intelligence (mapping) from information already within FBI 
records. An FBI employee can also analyze information that is obtained pursuant to DIOG 
Section 5.1.1 . If the employee needs information in order to conduct desired analysis and 
planning that requires the use of Assessment investigative methods beyond those permitted m 
DIOG Section 5.1.1, the employee must open a Type 4 Assessment in accordance with DlfXi 
Sections 5. 6. 3. 3. The applicable 80IH - 807H classification file {or other KOI -series 
classification file as directed in the Intelligence Policy Implementation Guide (IPG)) must be 
used to document this analysis. Sec the IPG for file classification guidance. 

15. 3 {U) Civil Liberties and Privacy 

(U) The FBI must collect intelligence critical to the FBI’s ability to cany out its intelligence and 
law enforcement mission. While conducting intelligence analysts and planning, the FBI will 
conduct its activities in compliance with the Constitution, federal law’s, the AGG-Dom and other 
relevant authorities in order to protect civil liberties and privacy, 

15.4 (II) Legal Authority 

<U) The FR1 is an intelligence agency as well as a law enforcement agency. Accordingly, its 
basic functions extend beyond limited investigations of discrete matters, and include broader 
analytic and planning functions. The FBI's responsibilities in this area derive from various 
administrative and statutory sources, See, e g , <i> 28 U,5,C. §§ 532 note (incorporating P.L. 1D«- 
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458 $$ 2001-2003) and 534 note (incorporating P.L. 109-162 § ] 107); and <ii) EO. 12333 If 
1.7(g), 

(U//FOUO) The scope of authorized activi ties under Part II of t he AGG-Dom is not limited to 
’Investigations" in a narrow sense, such as solving particular investigations or obtaining 
evidence for use in particular criminal prosecutions. Rather, the investigative activities 
authorized under the AGG-Dom may be properly used to provide critical information needed for 
broader analytic and intelligence purposes to facilitate the solution and prevention of crime, 
protect the national security, and further foreign intelligence objectives. These purposes include 
use of the information in intelligence analysis and planning under AGG-Dom, Part IV, and 
dissemination of the information to other law enforcement, USIC, and White House agencies 
under AGG-Dom, Part Vj. Accordingly, information obtained at all stages of investigative 
activity is to be retained and disseminated for these purposes as provided in the AGG-Dom* or in 
FBI policy consistent with the AGG-Dom, regardless of whether it furthers investigative 
objectives in a narrower or more immediate sense, (AGG-Dom. Part 111 

15.5 (U) 1 NTELLI GFNCE ANALYSIS AND PLANNING - REQUIRING A TYPE 4 ASSESSMENT 

lU FOUO) If an FBI employee wishes to engage in intelligence analysis and planning that 
requires the collection or examination of information not available in existing FBI records or 
database systems, or from information that cannot be obtained using the activities authorized in 
DIGG Section 5.1.1, a Type 4 Assessment must be opened and conducted in accordance with 
DIOG Section 5.6.3J. 

15.6 {UJ Authorized Activities in Intelligence Analysis and Planning 

(U> Hie FBI may engage in intelligence analysis and planning to facilitate or support 
investigative activities authorized by the AGG-Dom or other legally authorized activities. 
Activities the FBI may carry out as part of Intelligence Analysis and Planning include; 

15.6A (U) Stra tecic Intelligence A nal vsts 

(U FOUO) The FBI is authorized to develop overviews and analyses of threats to and 
vulnerabilities of the United States and its interests in areas related to the FBI’s responsibilities, 
including domestic and international criminal threats and activities; domestic and international 
activities, circumstances, and developments a fleeting the national security. FBI overviews and 
analyses may encompass present, emergent* and potential, threats and vulnerabilities, their 
contexts and eauses. and identification and analysis of means of responding to them. (AGG- 
Dorl Part IV) 


15.64,1 [U) Domain Management 

i t' FOUO) As part of Strategic Analysis Planning activities, the FBI may collect information 
in order to improve or facilitate “domain awareness 1 ” and may engage in “domain 
management." "'Domain management" is the systematic process by which the FBI develops 
cross-programmatic domain awareness and leverages its knowledge to enhance its ability to: 
proactively identify threats, vulnerabilities, and intelligence gaps; (ii) discover new 
mm i ties for needed intelligence collection and prosecution; and (iii) set tripwires to 
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provide advance warning of national security and criminal throats. Tripwires are described in 
DIOG Section 1 1. Effective domain management enables the FBI to identify significant 
threats, detect vulnerabilities within its local and national domain, identify new sources and 
threat indicators, and recognize new trends so that resources can be appropriately allocated at 
the local level in accordance with national priorities and local threats. 

(U.'VFDUG) The field office "domain" is the territory for w-hich a field office exercises 
responsibility, also known ps the field office's area-of-respoitsibi I tty (AOR), Domain 
awareness is the: (i) strategic understanding of national security and criminal threats and 
vulnerabilities that exist in the domain: fiij FBI’s positioning to collect against those threats 
and vulnerabilities; and (iii) the ability to recognize intelligence gaps related to the dom-ain. 

(U VFOUOl Through analysis of previously collected information, supplemented as necessary 
by properly authorized Type 4 Assessments, domain management should be undertaken at the 
local and national levels. All National Domain Assessments must be opened and coordinated 
by the Directorate of Intelligence (DI). Examples of domain management activities include, 
but are not limited to: collection and mapping of data such as 1-94 data, census crime 
statistics, investigative information, entities in the domain; analysis of trends; source 
development; and placement of tripwires. See DIOG Section 1 1 For further discussion of 
tripwires. Further guidance regarding domain management and examples of intelligence 
products are contained in the FBI HQ PI policy implementation guide (PG). 

(Lf.'VFOUO) All information collected during a Type 4 Domain Assessment must be 
documented in (he appropriate Assessment file (SO 1 El - S07H classifications), or if obtained 
without opening an Assessment, in another SGO-series classification file as directed in the Di 
PG. Any time a Type 4 Domain Assessment begins to focus on specific individuals), 
group(s), or organizations), w hose activities may constitute a violation of federal criminal 
law or a threat to the national security, or identifies persons or entities who may be actual or 
potential targets of or vulnerable to federal criminal activities or national security threats, a 
separate Assessment (Type I & 2 Assessment or a Type 3 Assessment) or Predicated 
Investigation must be opened to collect information regarding the particular person, or the 
threat or vulnerability. 

(L..FOUO) FBIHQ DI provides specific guidance in its FG regarding, the opening, 
coordination and purpose tor a Held office and national domain Type 4 Assessments. 

15.6.1.2 [U ) Written I NTELLl gen ce Prod ucts 

{U/7FOUO) The FBI is authorized to conduct research, analyze information, and prepare 
reports and intelligence assessments {analytical written products) concerning matters relevant 
to authorized FBI activities, such as: (i) reports and intelligence assessments [analytical 
product) concerning types of criminals or criminal activities; (ii) organized crime groups, 
terrorism, espionage, or other threats to the national security; { iii } foreign intelligence matters: 
or {iv) the scope and nature of criminal activity in particular geographic areas or sectors of the 
economy, (AGG-Dom, Fart IV) 

[U//FGUO) Pursuant to Rule 16 of the Federal Rules of Criminal Procedure, 18 CSC. 

Section 3500. and Department of Justice (DOT) policy, written intelligence products. 
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including classified intelligence products, may be subject to discovery in a criminal 
prosecution, if they relate to an investigation or are produced from information gathered 
during an investigation. Therefore, a copy of written intelligence products that arc directly 
related to an investigation must be filed in the appropriate investigative flSc(s) and must 
include appropriate el assiti cation markings. 

(U//FOUQ) A sub file named “INTELFRODS" exists for all investigative classifications, 
and a copy of alt written intelligence products described above must be placed in the 
appropriate investigative classification INTELPRODS sub-file. 

15.6.1.3 (U) United States Pehson (USPERJ Information 

(U' FGUO) Repents, Intelligence Assessments, and other FBI intelligence products should ;ri£l 
contain USPER information, including the names of United Slates corporations or business 
entities, if the pertinent intelligence can be conveyed in an understandable way without 
including personally identifying information. 

(U/.FOUO) Intelligence products prepared pursuant to this Section include, bur are not 
limited to: Domain Management, Special Events Management Threat Assessments. 
Intelligence Assessments. Intelligence Bulletins, Intelligence Information Reports. Weapons 
of Mass Destruction (WMD) Scientific and Technical Assessments, and Regional Field 
Office Assessments. 

15.6*1.4 (UJIntelligenceSvstems 

t U" FOUG) The FBI is authorized to operate intelligence, identification, tracking, and 
information systems in support of authorized investigative activities* or for such other or 
additional purposes as may be legally authorized, such as intelligence and tracking systems 
relating to terrorists, gangs, or organized crime groups. (AGG^Etoui, Part IV) 

(U//FOUQ) These systems operate to facilitate and support investigations through, the 
compilation and analysis of data and information on an ongoing basis, information stored in 
the systems includes, but is not limited to: investigative files; records obtained from other 
government agencies through information sharing agreements; open source materials: raw 
data from FISA and Title III collections; data extracted front source materials such as names, 
organizations, addresses, and telephone numbers: USIC Foreign Intelligence Collection 
Requirements, FBI National Collection Requirements and Field Office Collection 
Requirements; threat reports from law enforcement or the general public: and human source 
reporting. Access to and use of data contained in these systems is directed by the policies 
governing the particular system and the laws controlling the data contained therein. Analytic 
tools such as link charting and geospatial or statistical software are used to analyze (he 
information. 

! L FOUG) When developing a new database, the FBI Office of the General Counsel Privacy 
and Civil Liberties Unit must be consulted to determine whether a Privacy Impact Assessment 
i FLA) must be prepared. 
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15.6.1.5 (IJ) Geospatial Intelligence [GEOlNT} 

(U//FOUO) Geospatial Intelligence {GEOlNT) is the exploitation and analysis qf imagery and 
geospatial information to describe, assess and visually depict physical features and 
geographically-referenced activities on the Earth. As an intelligence discipline, GEOlNT in 
ihc FBI encompasses g[| the activities involved in the collection, analysis and exploitation of 
spatial information in order to gain knowledge about the national scrcnrtty/criminal 
environment and the visual depiction of that knowledge. GEOlNT also represents a type of 
information or intelligence product, namely the information and knowledge that is produced 
as a result of the discipline’s activities. 

(U//FOUO) Mapping is an activity under GEOlNT and may he used in Assessments ( Domain 
Management; Collection Management | and Predicated Investigations. 
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16 (U) UNDISCLOSED PARTICIPATION (UPP) 


16-1 (U) Overview 

(U//FOUO) Undisclosed participation (UDP) takes place when anyone acting on behalf of the 
FBI, including but not limited to an FBI employee or confidential human source (CHS), becomes 
a member or participates in (he activity of an organization on behalf erf the U.S. Government 
(USG) without disclosing FBI affiliation to an appropriate official of the organi nation. 

1 6, 1, 1 (U) A UTHQRITIES 

(U) The FBI derives ils authority to engage in UDP in organizations as pari of its investigative 
and intelligence collect ton missions from two primary sources, 

(11) First, Executive Order (E,Q.) 12333 broadly establishes policy for the United States 
Intelligence Community (USIC). Executive Order 12333 requires the adoption of procedures for 
undisclosed participation in organizations on behalf of elements of the USIC within the United 
States. Specifically, the Order provides LL . . . [njo one acting on behalf of the Intelligence 
Community may join or otherwise participate in any organization in the United States on behalf 
of the any element of the Intelligence Community without first disclosing such person’s 
intelligence affiliation to appropriate officials of the organization, except in accordance with 
procedures established by the head of the Intelligence Community element concerned — Such 
participation shall be authorized only if U is essential to achieving lawful purposes as determined 
by the Intelligence Community element head or designee " (F.O. 12333. Section 2.9. 

Undisclosed Participation in Organizations within the United States}, The Order also provides, at 
Section 2.2, that ll [nJothing in [E,0. 12333] shall be construed to apply to or interfere with any 
authorized civil or criminal law enforcement responsibility of any department or agency. w 

(li) Second, in addition to its role as member of the USIC, the FBI is also the primary criminal 
investigative agency of the federal government with authority and responsibility to investigate all 
violations of federal taw that arc not exclusively assigned to another federal agency. This 
includes the investigation of crimes involving international terrorism and espionage. As a 
criminal investigative agency, the FBI has the authority to engage in LDP as part of a Predicated 
Investigation or an Assessment. 

<1 FOUO) The FBI's UDP policy is designed to incorporate ibe FBI’s responsibilities as both a 
member of the USIC and as the primary criminal investigative agency of the federal government 
and, therefore, applies to all investigative and information collection activities of the FBI. It is 
intended to provide uniformity and clarity so that FBI employees have one set of standards to 
govern all UDP. As is the case throughout the DIOCI. however, somewhat different constraints 
exist if the purpose of the activity is Lhe collection of positive foreign intelligence that falls 
outside the FBI’s law enforcement authority. Those constraints arc reflected where applicable 
below. 
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16 A. 2 (U) Mitiga T iON of Risk 

(U//FGUO) The FBI's policy For UDP uses a risk Assessment model: higher approval levels are 
required for UDP that carries a greater risk to civil liberties because it is more intrusive. 
Accordingly* the policy draws a distinction between what is termed “sensitive UDP" and "non- 
sensitive UDP." These categories focus on the type or purpose of the organization and draw on 
die concept in the Attorney General Guidelines for Domestic FBI Operations (AGG-Dom) ofa 
“sensitive investigative matter" as the starting point for the distinction. 

16 A 3 (U) Sensi tive UDP DEFINED 

(LF/FOUO) Sensitive UDP is the undisclosed participation in the activities of a political, 
religious, or media organization* an academic institution, an organization having an academic 
nexus, or an organization devoted to advocacy relating to s-ociaL religious, or political causes or 
Ehe education of the public about such causes, 

1 6AA (U) Non-sensitive UDP defined 

(UZ/FGUO) Non-sensitive UDP is undisclosed participation in the activities of any other 
legitimate organization, such as a business or a ciub formed for recreational or social purposes. 
Any doubt about whether an organization falls within the Sensitive IJDP category must be 
resolved by presuming the organization docs fall within that category, 

26.1.5 (U)Type of Activity 

(U//FOUO) The UDP policy also takes into account the type of activity in which an FBI 
employee or CHS will engage. For example, in Sensitive UDP. tasking a CFES or FBI employee 
to join an organization to obtain information about the organization that is not generally known 
to the public requires a higher approval level limn obtaining information provided by an 
individual who is already a member of the organization. Conduct that may influence the exercise 
of First Amendment rights by members of the organ izalion or the activities of the organization, 
the most intrusive UDP, requires legal review and executive approvals. Finally, the UDP policy 
does not apply to organizations that are not legitimate organizations, as defined below. 

1 6*2 (U) Purpose, Scope, and Definitions 

1 6,2. 1 (U) ORGANIZA TiON 

{U//FGUO) An association of two or more individuals formed for any Lawful purpose whose 
existence is formalized in some manner. The term includes, but is not limited to: social, political, 
fraternal, professional, business, academic, ethnic-affinity* and religious organizations and 
includes organizations that meet and communicate primarily on the Internet. For purposes of 
UDP. an organization does not include a loose group of friends, social contacts, or business 
associates who may share common interests but whose association lacks any formal structure 
(e,g., the Rotary is an organization: a group of friends who play poker or meet at a gym for 
athletics every weekend is not). 


Ocubc 
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1 6.2.2 (U) Legitima te Qrga njza tiov 

{U//FQUQ) An organizption is legitimate''’ when it is formed for a lawful purpose and its 
activities are primarily lawful { Example: Traditional criminal organizations are not legitimate 
organizations because their primary purpose is to raise money through the commission of crime. 
An organization whose primary purpose is to engage in destruction of property as a means to 
bring public attention to commercial activities that harm the environment is also not a legitimate 
organization within the meaning of this definition because its primary purpose is to engage in 
criminal conduct. On the other hand, an organization that seeks to bring attention to a social or 
political cause by engaging primarily in lawful protest or advocacy, but also some acts of civil 
disobedience, is a legitimate organization; even though the organization may engage in some 
unlawful acts, the purpose for which it exists is a lawful one and its activities arc primarily 
lawful.) Any doubt about whether an organization is “legitimate’' 1 must be resolved by presuming 
it is legitimate for purposes of the UDP poliey. 

1 6.2.3 ( U) Participa tion 

(U//FOUO) Taking part in the organization's activities and interacting with its member? within 
the structure or framework of the organization, whether the individual is tasked to join the 
organization or is already a member is participation. Occasional social or infrequent ancillary 
business dealings with members of an organization do not constitute participation. In addition, 
passive "infrequent attendance 11 " (live occasions or less} by a person who is not a member of 
the organization does not constitute "participation.” A CHS or FBI employee who passively 
attends an organization’s meetings may report any relevant information observed. Regardless of 
the number of times a CHS or FBI employee attends an organization’s meetings, if he/she 
becomes involved in the organization’s activities or acts with or on behalf of the organization, 
the CHS or FBI employee is “participating” for purposes of the UDP policy. 

lU FOUO) Sensitive UDP may involve the following: 

A) ( LfyVFOUO \ Academic imtitufiotis : Participation includes attending classes in person or 
taking courses on-line. Participation does not include registration: 1 1 ) solely for the purpose of 
obtaining education or training that is relevant to FBI employment or affiliation; or (5) to 
support credibility in a covert role, provided the FBI employee or confidential human source 
will not attend classes and will not utilize e-mail or other accounts alTihaled with the academic 
institution to communicate wiih subjects of an investigation. (See note after paragraph C 
below) 

B) (U'.'TOUtri Media ; Participation includes joining the staff of a publication or a media- 
centered organization and other activity affecting a publication, such as submitting an. article 
for publication. ■(Sec note after paragraph C below r ) 

C) ( U//FQUQ) Poiiticai: Participation includes joining or working on behalf of a political parly 
al any level, a political action group or committee, or a coicmirtce formed for the purpose of 
electing an individual to public office, {Sec note below) 


‘ ill 'FOLIO) At time of printing, Section Ift.Z.H rule for passive "in Ire tpient attendance" whs pending 
final review and approval by the Attorney General. Please always check the online DIOG available on 
the FBI Intranet fur the current and ufficial OlllG. 

ated; 
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( LV/FOUOi Note: “infrequent lirtcndumce" (sue footnote above) at an event or activity of 

a sensiti ve of^amzafiort as defined in PIQG Section 16.1. 3 by a tasked CHS requires approval 
as \t\ tW "Special Rule for Other Sensitive Organ iz-atfonsA See DIOG Sections 

13.5.1.3,1 and 18,5,5.3 D 

D) f UiFQUOi ReUitkn is: Parti cipas ion includes joining the religious organisation or 
partici paling in activities of the organization that arc central lo the function of the 
organization, whether or not open to the public. Attendance at a social event sponsored by the 
religious organization that is open to the public will generally not constitute "participation,* 

(l-V/FOUO) [Sole; "Infrequent attendance* (see footnote WS above) at a religious service by 
an employee or a tasked CHS requires approval as set forth in the ^Special Rule for 
Rdlgiim* Service**” SeeDIOG Sections 18.5.1,3.1 and 18.5,5.3 ,C. 

(U//FOUO) Examples of Participation: 

A) (U//FOUO) Example 1 ; An FBI CHS is tasked to begin attending religious sendees at a 
particular religious facility on a regular basis. Is this participation? 

I U. 1 ' /FOLIO} Res ponse to Example 1 : This would constitute “participation" because religious 
services are central to the function of the religious organization and from the outset, the FE31 
intends for the CHS to become a regular participant. 

ft) (UiVKQUO} Example 1 \ In a Predicated Investigations, an FBI CHS is tasked to attend, as a 
passive observer, the organizational meeting of "No Tree Unsaved." an environmental group 
that is being advertised as "more effective than ELF in saving the planet” and to report back 
on any relevant information learned. Is this participation? 

(U//FQUQ) Response to Example 2 : This k not "participation" because it is one-time or 
“infrequent attendance" (five occasions or less) by a person who is not a member of the group. 
If this talking took place during an Assessment, SSA approval would be required before 
tasking a CHS to passively attend activities of a sensitive organization, as defined in DIOG 
Section 16.3,1. 

C) ( Ur? FOLIO) Example! : The CHS from Lxample 1 reports that tire group has a mailing list and 
a twitter feed. The FBI tasks the CMS to sign up fur bulh. Is the CHS now "participating” in 
No Tree Unsaved? 

D) (U//FOUQ) Response to Example J : By virtue of joining the mailing list or the twitter feed, 
the CFIS is participating in the group. 

16.2.3.1 (Lf) Undisclosed Participation 

(LMFGUG) Participation is "undisclosed* when anyone acting on behalf of the FBI, including 
but not limited to an FBI employee or CHS, participates in the activity of the organization on 
behalf of the USG without disclosing FBI afllliatioit to an appropriate official of the 
organ izati. on. A CHS who participates in an organization entirely on his own behalf and who 
is not tasked by the FBI to obtain information or engage in other activities in that organization 
is not engaging in UDP — regardless whether the CHS volunteers information to the FBI and 
regardless whether rhe CHS's affiliation w ith the FBI is known. If the CHS is tasked lo obtain 
specific information or to take specific action, his/her subsequent participation lo fulfill that 
task is on behalf of the FBI 


Vefsltm UJliiLi. 
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16.2.3.2 [U//FOUD) Influencing the Activities of the Organization 

(U//FOUO) LDP influences the activities of the organisation when it has a significant effect 
on the organization's agenda,, course of business, core activities, or future dirge Lion. Simply 
voting or expressing an opinion on these matters ax a member will generally not tall within 
this definition. 

1 6.2 .3.3 [ U //FOUG) 1 JWFUfENCI NG THE EXERCISE OF FIRST AMENDME NT RIGHTS 

(U//FOUQ) UDP influences the exercise of First Amendment rights of the members of an 
organization when it substantially affects the agenda of an organization with respect to the 
advocacy of social, religious, or political causes, the education of the public about such 
causes* or the practice of religion. 


16.2.3.4 fU) Appropriate Official 

(U//FGUO) An individual with actual or apparent authority to act on behalf of the 
organization in directing or authorizing its activities or monitoring its membership. If the CHS 
or FBI employee whose participation is aL issue is an ofildal of the organization, his or her 
knowledge atone is not sufficient to remove the participation from being UDP. Disclosure 
must be made to an additional official with actual or apparent authority to act on behalf of the 
organization in order for the activity of the CHS or FBI employee not to be UDP. 

1 6.2 .3.5 { U ) Sensitive U n disclosed Parti ci p atj u n 

(U//FOUO) Undisclosed participation in the activity of: 

A) (LV/FOUO) A political, religious, or media organization, an academic institution, or an 
organization having an academic nexus: or 

B) (U//FQUO) An organization that has as a significant purpose the advocacy of social, religious, 
or political causes or the education of the public about such causes: or 

C) (U//FOUO) Any other organization, in which UDP should, in. the judgment of the FBI 
employee proposing ihc UDP or the approving official, be brought to the attention of senior 
FBI officials. 

(U//FOUO) Refer to the definitions in DIOG Section 10.2 relating to Sensitive Investigative 
Matter {SIM) for the definitions of political organization* religious organization, and 
academic nexus. The definition of “media organization" is broader than news media and 
includes any organization that has as a significant purpose the publication, or broadcast of 
news or any other information, 

(U//FGUO) Any doubt about whether an organization has as a significant purpose the 
advocacy of social, religious, or political causes, the education of the public about such 
causes* or the practice of religion* must be resolved by presuming the organization has such a 
purpose. 
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1 6.2. 3.6 (U) Already a Member of the Organization or a Participant in its 

Activities 

(UV/FOUO) This means that Ihe individual who is acting on behalf of the FBI has not at any 
time been directed by the FBI, by a law enforcement agency or by a member US 1C to join the 
organization or participate in iLs activities, 

16.3 (U) Requirements for Approval 

16,3.1 (U) Genera l Requirements 

(U//FOUO) UDP is permitted in either an Assessment or a Predicated Investigation subject to the 
approval requirements and limitations set forth below. The requirement for UDP authorization 
applies only when the information furnished by the Cl IS or FBI employee derives from being a 
member or participating in the activities of organization by the CHS or FBI employee. UDP of 
an FBI employee will always be considered as a tasked activity and subject to applicable 
supervisory approvals. Approval granted for UDP in an Assessment or investigation will 
generally apply for the duration of the Assessment or investigation unless there is a change of 
circumstances that implicate either another approval requirement in this subsection or the 
approval standards listed in subsection 16.5. The approval requirements set forth below an: in 
addition to the required supervisory approvals for undercover operations (UCQ) established by 
the Attorney Genera! Guidelines for FBI Undercover Operations (AGG-UCQ) and the required 
supervisory approvals to open and use a CHS established by the Attorney General Guidelines on 
the Use of FBI Confidential Human Sources (AGG-CHS) and the FBI's Confidential Human 
Source Policy Implementation Guide (CHSPG). 

16.3.1.1 (U) Undercover Activity 

(U//FOUO) UDP as an undercover activity by an FBI Undercover Employee (UCE) is subject 
to the policy and procedures for undercover operations contained within the AGG-UCO, the 
AGG-Dom, and FBI policy, and may only occur in a Predicated Investigation, UDP as an 
undercover activity by a UCE is not permitted in an Assessment. 

16.3.1.2 ( U) Concurrent A pproval 

(U//FOUQ) The approval to open a CHS and approval for UDP may be given concurrently if 
U DP ls a reason the CHS is being opened in the first instance [e.g. T a CHS is recruited and 
opened: because lie is a member of an anti-government militia group). If a CHS who is already 
opened will engage in UDP under circumstances that are significantly different than those 
originally approved (eg., a CHS in a narcotics investigation is tasked to join a white 
supremacist group), new UDP approval is required. Other review and approval requirements 
as specified he low may also apply. ITa CHS already approved for UDP In one organization is 
tasked to participate in another organization on behalf of [he FBL new UDF approval is 
required. 


Version Dated: 
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16.3.1.3 [U) Delegation and "'Acting "Status 

(U//FQUO) The approval authorities described in Sections 16.3. 1.4 and 16.3 A .5 may not be 
delegated, An FBI employee properly designated to serve in an "acting" capacity may take 
action to approve or disapprove as if regularly appointed to the position. 

(U//FOUO) Sections 16.3.1.4 unci 16.3. 1.5 below, which set forth the AG approved UDP 
policy, reference time periods for approvals. By FBI policy, some of these time periods have 
been shortened. The schedule established in Section 16.4, which sets forth the FB1HQ 
Approval Process for UDP Requests, is designed lo ensure all KBIliQ approvals arc obtained 
wiihin the AGG-Dom required lime periods. 

16.3.1.4 (U) Specific Requirements for General Undisclosed Participation (Non- 
sensitive UDP) 

1 6.3. 1.4.1 ( U//FO UOJ Orta ining as forma tion a.5 a member or par ticjpant in the 

ACT I VI Tins Of AN ORGA N1ZA Tim f 

A) (U//FOUO) In Assessments, approval by a supervisory special agent (SSA) is required if: (i > a 
CHS who is already a member or participant in an organization is tasked Lo obtain information 
on behalf of the FBI. or fii) a CHS will he tasked lo join the organization or participate in its 
activities to obtain information. As noted above, approval for this UDP may be granted 
concurrently when approval to open the source is granted. 

R) (U//FOUO) In a Predicated Investigation, no supervisory approval is required if: |i) a CHS 
who is already a member dr participant in an organization is tasked to obtain information on 
behalf of ibe FBI, or (til a CHS will be (asked to join (he organization or participate in E(s 
activities to obtain information. SSA approval is required to task an FBI employee (o join the 
organization or participate in its activities lo obtain information. If the UDP is part of an 
undercover operation (UCG), approval requirements for that operation apply, including review 
by the CDC and approval of the SAC. 

1 6. 3. h 4. 2 (U//FO UO} Eng a ging in conduct for the purpose of infl uencing the 

ACTI VFTIES OF THE ORf.ANtZA T(ON OR CONDUCT THA T MAY INFl HENCE THE EXERCISE OF 

First Amendment rights by members of the organization 

I U//FOUO) Regardless of prior membership or participation: 

A) (U//FOUO) In an Assessment, a CHS participating in an organization in an undisclosed 
capacity is noi permitted to engage in conduct on behalf of the FBI for the purpose of 
influencing the activities of the organization or that muy influence (he exercise of First 
Amendment rights by members of the organization. 

B) (U//FOUO) In n Predicated Investigation., if a CHS or FBI employee is to engage in eunduci 
on behalf of the FBI for the purpose of influencing the activities of an organization, review by 
the CDC and approval by the SAC are required. 

C) (U//FOUO) In a Predicated Investigation, if a CHS or FBI employee is to engage in conduct 
Lhal may influence the exercise of First Amendment rights by members of the organization, 
prior review- by the Office of General Counsel (OGC) is required. IfOGC determined that the 
UDP is not likely to influence the exercise oFFirst Amendment rights by members of the 
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exercising oversight for Lite investigation may approve the UDP- IF the UPP is part of an 
UCO, approval requirements for that operation apply. If approved, notification must be made 
by the requesting field office to the Sensitive Operations Review Committee (SORC) within 
10 days of approval. 

P) (U/TFOUO) In a Predicated Investigation, if a CHS or FBI employee is to engage in conduct 
thal is i me nded to influence the exercise of First Amendmen t rights by members of the 
Ofgani Italian, or if there has been a determination by OGC that the UDP is likely to influence 
the exercise of First Amendment rights by members of the organ izati on, prior approval hy the 
Director, the Deputy Director, or an Executive Assistant Director is required. Such requests 
will be considered following review by (XX’ and other review required hy FBI policy, such as 
that Conducted by the Undercover Operations Review Commi ttee, In determining whether to 
approve such activity, ihe approving official will consider whether such UDP is necessary to 
meet a significant investigative goal! that cannot be achieved without this level of participation. 
If approved, notification must be made by the requesting field office to the SORC within 10 
days of approval. 

16,3 . 1. S (U) Sped Etc Requ i k em e m ts for Sensiti ve U ndi ^closed Parti ci ration 

[Sensitive UDP] 

1 6, 3, 1. 5, 1 (U//FOUO) Obtaining informa tion as a member on a participant in the 

a cn vims of a sensitive qrg&nra tion 

A) (U'TOUO) Subject to subsection 16.3, 1.5.2 below, in Assessments and Predicated 
Investigations, if the CHS is already a member of the organization or a participant in its 
activities and is tasked to obtain information, SSA approval is required. As noted above, when 
a CHS is opened to conduct these activities, SSA approval for UDP may be granted 
concurrently when the source is opened, 

til (U//FOUO) in Assessments and Predicated Investigations, if a CHS or FBI employee is tasked 
to join an organization or participate in its activities and obtain information, review by the 
CDC and prior approval of the SAC is required. If approved, the field office must notify the 
SORC within 10 days following this approval. If the UDP is part of an UCO, approval 
requirements foe that operation apply, 

1 6. 3, L 5.2 (U//FOUO) OBTAINING “INSIDER " I WORM A TION DURING A N ASSESSMENT 

(U/fFOUO) If a CHS, who is already a member of or participant in a sensitive organization, is 
tasked to obtain information that is not generally known to regular members or participants, 
CDC review and prior SAC approval are required, If the CHS is tasked to join the 
organization for the purpose of obtaining this type of information, review by OGC and 
approval by the operational division’s AD with program oversight responsibility are required. 
If UDP is approved, the field office must notify the SORC within 10 days. 

16,3. 1,5,3 (U//FOUO) Engaging in conduct tha t may influence the activities of the 

ORGAN IZA TION OR THE EXERCISE OF FIRST AMENDMENT RIGHTS BY MEMBERS OF THE 
ORGANIZATION 

(U//FOUO) Regardless of prior membership or participation status: 


Vi-rciun Utttod 
October 15, Stilt 
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A) (UATQUO) fn an Assessment, a CHS participating in an organisation in an undisclosed 
capacity is not permitted to engage in conduct on behalf of the FBI for the purpose of 
influencing the activities of the organ i zation or conduct that may influence the exercise of 
First Amendment rights by members of the organization. 

B) (LV'FOUO) In a Predicated Investigation, if a CHS or FBI employee is lo engage m conduct 
on behalf of the FBI for the purpose of influencing the activities of an organization or conduct 
that may influence the exercise of First Amendment rights by members of the organization, 
prior review by OGC is required. If OGC determines that live LJ DP is not likely to influence 
(he exercise of First Amendment rights by members of the organization, the AD of the FBI 
Headquarters operational division exercising oversight for the investigation may approve the 
LDP. If approved, the requesting field office must notify the SGRC within 10 days of 
approval, 

C) (U//FOUQ) In a Predicated Investigation, if a CHS or FBI employee is to engage in conduct 
on behalf of the FBI that is intended to influence the exercise of First Amendment rights by 
members of the organization, or if there has been a determination by OGC that the LDP is 
likely to influence the exercise of First amendment rights by members of the organization, 
prior approval by the Director is required. Die Director will only consider such requests 
following review by OGC and the SORC or other similar review, including Lhal conducted by 
the Undercover Operations Revleiy Committee, In determining whether to approve such 
activity, the Director will consider whether such UDP is necessary to meet a significant 
investigative goal that cannot be achieved without this level of participation, 

16.4 (U) Supervisory Approval Not Required 

i l FOLIO) Participation in the activities of an organization under the following circumstance* 
does not require supervisory approval: 

A) < U'/FODO) A CHS. who is already a member of an organization or who joins On his or her 
own behalf, volunteers information not in response to a specific request or tasking by the FBI. 

B) (LI.'/FOUQ) The information to be obtained will derive solely from attending events or 
activities that are open to the general public on the same terns and conditions as members of 
the general public. IN ate: If the public event is a religious service, see the "Special Rule for 
Religious Services” in DIOG Section lfl.5.1 J.l.L If the attendance is at an event or 
activity uf a sensitive organization, see the “■Special Rule Mf Other Sensiijve 
Organizations 4 in DEOf; Section I&.5.1A1.2. 

C) (UZ/TOliQ) The organization is an entity tliai is openly acknowledged by a foreign 
government to be directed or operated by that foreign government. 

D) tL'/FODO) The organization is reasonably believed to he acting on behalf of fl foreign power 
and its U.S.^based membership is reasonably believed Eo consist primarily of individuals who 
are not United States persons (USPERs). 

EJ {LV'FOUO) The organization is not considered a legitimate organization because it was not 
formed fora lawful purpose or because its primary purpose is to engage in unlawful activity. 
i :\oTt! : Some organizations may have a lawful purpose but also contain one or more smaller 
factions that arc dedicated to committing criminal acts or otherwise violating the laws of Ehc 
United States. Authorization is not required if the participation is entirely Limited to the 
activity of the smaller faction. Any doubt about whether the UDP can or will be so limited 
should be resolved by assuming it cannot be so limited.'! 
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16.5 (U) Standards for Review and Approval 

(U//FOUQ) An FBI employee proposing LDP or an approving official reviewing a request for 
UDP must consider the following factors: 

A) {U//FOUO) The potential benefits to national security or the public welfare to be achieved by 
■obtaining information through the undisclosed participation in the organization; 

B J (U//FOUO) Whether the proposed course of action is a reasonable means to achieve those 
benefits and is appropriate under the circumstances; 

C) (U//FOUO) Whether tlie course of action, is the least intrusive investigative method feasible 
under the circumstances; 

P) ( LWFOUO) Whether the anticipated benefits outweigh any adverse impact on civil liberties, 
privacy, or other rights that may be affected; and 

C} ( U.'/FOUO) Whether there is a foreseeable risk of more than a <te minimis adverse impact on 
civil liberties, privacy, or other rights and. if so. whether appropriate safeguards including 
limits on duration and scope, hate been considered and will be imposed to ensure adherence 
with applicable law and to minimize such risk. 

(U//FOUO) For UDP undertaken to collect foreign intelligence that does not concern criminal 
activities or threats to the national security (''positive foreign intelligence"}, an approving official 
must determine, in addition to the factors listed above, that such participation; 

A} (U//FOUO) Is consistent with the admonition in the AGG-Dom to operate openly and 
con sensually with USPFftsto the extent practicable; and 

B) (U//FOUO) Is essential to achieving lawful purposes. 

(U.//FOUO) In addition to the considerations specified above, use of a CHS is subject to the 
policy and procedures specified in the AGG-CHS and rhe FBI’s CHSPG, (f there is any 
inconsistency between the CHSPG atid this policy, this policy controls. 

(U//FOUO) Participation by an FBI employee tit an undercover capacity is subject to the policy 
and procedures for undercover operations contained within the At lorrtev General G u idd in es for 
FBI Undercover Activities [AGG-UCQh the AGG-Dom and FBI policy, (See DIOG Section 18. 
the Undercover and Sensitive Operations PG, and the National Securitv Undercover Operations 
(NSUCOIPG. 

(U/.FOUO) Questions concerning UDP should be discussed with the CDC and OGC. Questions 
about whether or not an organization is considered a "legitimate” organization must be referred 
to OGC. 

16.6 (U) Requests for Approval of Undisclosed Participation 

(UATOUO) SSA approval for UDP must be documented in an appropriate file 1 ". The 
documentation must indicate that the SSA considered the I actors set forth in subsections 16.5 in 
approving the proposed UDP. The documentation must also identify or describe the organization. 


ia ( U.'/FOUO} If the UDP 15 for a CHS, Ihe approval muni be documenled in [he CliS's DELTA Jilt. Thu approval 
document must reference the investigative file in which LDP will be conducted. 


Verdun 17 Jtnl ; 
OcMtwr 1 3. 21)11 
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describe the anticipated parti ci pal ion by the CHS or FBI employee in the organization and the 
expected duration of that participation, contain an explanation why UDP is the least intrusive 
alternative feasible under the circumstances, and. if the purpose of the investigation or 
Assessment is the collection of foreign intelligence from USPERs who ate members of the 

contain an explanation df why dealing openly and eurtserisually with those persons 
is not feasible. 

(U//FOUO) A UDP request must contain the following information: 

A) (LV/FOUQ'S The name of the organization and a description of its mission and activity. 

B) (U//FOUO) A description of the investigative or Assessment plan with spec Hie details 
regarding the anticipated, participation by the CHS or FBI employee in the organization; an 
explanation of how such participation will further the Assessment or Predicated Investigation 
or assist in the collection of foreign intelligence; and a statement regarding the expected 
duration of the UDP, 

CJ (U//FOUO) An explanation why UDP is the least intrusive alternative feasible under the 
circumstances, and additionally, ifihe purpose of the investigation or Assessment is the 
collection of foreign intelligence from USE’Elts who are members of the organization, an 
explanation why dealing openly ttnd COitSCilSUally With those persons is not feasible, 

D) (U/v'FOUO) An explanation whether the participation in the organization by the CHS or FBI 
employee is i ntended to influence (he activities of the organization Or may influence the 
exercise of First Amendment rights by members of the organization, and, if it may. how it 
might influence these activities. 

E) (U'VFOUO) A description of any safeguards that will be implemented to minimize the impact 
on (he exercise of First Amendment rights, if applicable, 

Fi (U//FOUQ) I T expedited review is requested* a description of the operational reasons for that 
request and a statement of the dale by which the request must be approved or denied, 

t L FGUO) Review of UDP requests should be accomplished in an expeditious manner, [n all 
events, review and approval by FBI I Icadquarters dements should be accomplished within 30 
days of the submission of the request. If an earlier approval is needed for operational reasons, the 
basis for expedited review must he clearly stated in the request Approval by an FBI 
Headquarters element will he noted in correspondence returned to the requesting field office that 
is to he retained in the appropriate investigative file, 

16.7 (U) Duration; 

( l FOUQ) The duration of UDP is limited by the Predicated Investigation or Assessment in 
* h:eh it is authorized and must be terminated at (he conclusion of the investigation or the 
Assessment unless: (i) the Assessment results in the opening of a Predicated Investigation as to 
which the UDP will contribute, or fii) circumstances warrant the temporary continuation of the 
L DP by the CHS in the organization because a new Assessment or Predicated Investigation is 
planned that will utilize the CHS’s placement and such temporarily-continued UDP activity is 
rev iewedby the CDC and approved by an ASAC, Future tasking to join or participate in the 
aettv ities of an organization in which a CHS or undercover employee (UCE) was previously a 
member requires new approval , 
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16.8 (U//FOUO) Sensitive Operations Review Committee (SORC) 

1 6.8.1 { U//FOUO ) SORC Notification 

{ U//FOUO) As indicated above, the field office will provide notification to the SORC. through ' 
the AD of the FBI Headquarters division with oversight responsibility for the investigation or 
Assessment concerning the following approved UDP: 

A) (U'V'FOtJO) If in the course of an Assessment involving sensitive UDP, a CHS is tasked to 
join an organization or participate in its Activities, or 

0) (U//FOUOJ In the course of a Predicated Investigation involving either sensitive or non- 
sensitive UDP, a CHS or FBI employee is tasked to undertake a rote that may tend to 
influence the exercise of First Amendment rights hy members of the organization hut that 
OGC has determined is not likely to influence the exercise of such rights. 

(U//FOUG) Such notifications will be received by the FBI staff supporting the SORC. The 
SORC will receive reports of such UDP from the supporting staff on □ schedule and in a form to 
be determined by the SORC, 

16.8.2 (U//FOUOJSORC REVIEW 

(U//FOUO) The SORC will review arty proposed sensitive UDP in an organization that is 
purposely taken to influence the exercise of First Amendment rights by members of the 
organization or that has been determined by OGC to likely influence the organization's activity. 
The request will be reviewed by the OGC which will provide advice to the SORC on the matter. 
The SORC will prepare a written recommendation regarding the request and forward the request 
nind its recommendation to the Director for approval. The decision of the Director will be 
documented and forwarded to the appropriate field office, 

(U//F0UO) For more details regarding the organization and functions of the SORCT see DKXI 
Section 10.2 above and Section 16.9below r . 

16.9 (U) FBI HQ Approval Process of UDP Requests 

1 6. 9, 1 (U) Submitting the UDP request to FBIH Q 

(U//FOUO) After appropriate coordination and approval wiLhin the field office, a UDP request to 
FBI HQ must he submitted with an F.C addressed to the appropriate FBiHQ operational unit with 
responsibility for oversight of the investigation. The F.C must contain the information required 
by subsection 16.6 and request approval of the L-DP. If the proposed UDP will require review by 
the SORC’, the EC should also address the factors the SORC will consider in making its 
recommendation to the Director {see DIOG Section 1 0.2,1), If expedited review is required, the 
circumstances requiring expedition must be clearly delineated in the EC. including the date by 
which the field office or FBI! IQ division requires the determination Review and approval 
authorities will take note of these special circumstances and complete their actions as 
expeditiously as possible. The time frames set forth be tow- in sections 16,9,2 and 16,9,3 will 
apply to routine UDP requests. Absent unusual circumstances, the FBIHQ approval processes 
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discussed below should be completed within 30 calendar days from the receipt of the initial 
submission by the field office or FBI HQ division. 

(U//FOUO) #ote- A CHS with prior UDP authority may require new UDP authority if his/her 
role within a particular organisation changes. For example, in a Predicated Investigation with 
SAC approval a CHS may be tasked to join an organisation and participate in its activities. If the 
CHS subsequently moves into a position where the level of participation may be seen as 
influencing the activities ofthe organization* then new UDP approval would be required. While 
the new UDP approval request Is pending at FBIHQ, the field office may continue to accept 
intelligence from the CHS but may not actively task the CHS to participate in any activities 
beyond those already approved under the prior UDP. 

1 6. 9.2 (U//FO UO) Assessments - CHSs tasked to join sensitive 
ORGANIZATIONS AND OBTAIN INSIDER INFORMA TION 

(L FOUO) In Assessments, if the UDP is considered sensitive and involves tasking a CHS to 
join an organization for Lhc purpose of obtaining insider information, the FBIHQ operational unit 
with responsibility for oversight ofthe .Assessment will prepare a response EC for review by 
OGC (Investigative Law Unit (I LU) in criminal* DT, WMDD, and CyD investigations and 
National Security Law Branch (NSLB) in national security investigations) and approval by the 
AD of the operational Division. The reviewing OGC unit and the operational division AD will 
apply the standards in Section 16.5 above in reviewing and deciding whether to approve. This 
action should be completed within 10 business days of receipt of the request from the field 
office. Notice to the SORC will he included in the response EC and satisfies the requirement for 
notice by the field office, 

16.9.3 (U//FO UO) PREDICA TED iNVESTIGA TfONS - UDP REQUESTS INTENDED TO 
OR WHICH MAY INFLUENCE THE ACTIVITIES OF AN ORGANIZATION OR THE 

exercise of First Amendment rights by its members 

111 . FOUO) When the field office determines that UDP during a Predicated Investigation is 
intended to or may influence the activities of an organization of the exorcise of First 
Amendment rights ofthe organ izatiorfs member?;: 

A) {U//FQUG) Within three {3) business days of the receipt of the EC, the responsible FBIHQ 
operational unit must submit the field office's EC lo OGC (Attention ILL! in criminal, DT. 
WMDDand CyD investigations or Attention NSLB, in national security investigations) for a 
determination: (1) whether die UDP is intended or likely to influence the activities of the 
organization or the exercise of First Amendment rights of the members of the organization: (2) 
if the UDP is intended or likely to influence (he activities of the organization, whether or not it 
is intended or likely lo influence the exercise of First Amendment rights of the members ofthe 
organization. 

B) (U//FQUO) Within five (5) business days of the receipt of the EC from the FBIHQ operational 
unit, OGC must review the request and submit its written determination as follows: 

1 1 (U.VTOUO) If OGC determines the UDP fs pot like ly to intluence tlie activities ofthe 
organization or the exercise of First Amendment rights of the members of lhc organization, 
the request, together with DGC T « written determination, must be returned to the 
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responsible FBIHQ operational unit. The responsible FBI HQ operational unit must advise 
the requesting field office and the 5GRC of OGC's determination by EC within five (5 ) 
business days of receipt. Upon receiving this advice, the requesting Held office must then 
obtain die appropriate UDP approval at the field office Level pursuant to subsections 
16.3.1.4. 16.3.1.5, and 16.5. 

2) (U//FGUO) IfOGC determines the UDP is likely to influence the activities of the 
organization but is not likely to influence the exercise of First Amendment rights uf the 
members of the organization, OGC must provide a written determination to the responsible 
FBIHQ operational unit. The responsible FBIHQ operational unit must include OGCY 
detennination in a recommendation EC to the responsible AD within five (5 ) business 
days. The responsible AD must determine within ten (10) business days whether to grant or 
deny the LTDP applying the standards established in Section 1 6.5 above. Whelher the 
responsible AD approves or denies (he UDP. the responsible FBIHQ operational unit must 
notify by EC the field office and die SORC within three (3) business days of the AD's 
decision. 

3) (U//FOUO) IfOGC determines the UDP is likely to influence the exercise of First 
Amendment rights of the members of the organization: 

a) {IWFOUO! For non-sensitive L.'DP, QGC’ must provide a written determination to the 
responsible FBIHQ operational unit. Within live {51 business days* the responsible 
FBIHQ operational unit must include OGC’!* determination in a recommendation EC to 
the Director, Deputy Director, or Executive Director, as appropriate. The approving 
official must determine within ten (10| business days whether to grant or deny the UDP 
applying the standards established in Section 16.5 above. Whether the approving 
official approves or denies the UDP, the responsible FBIHQ operational unit must 
notify the SORC and requesting field office within three (3) business days of the 
decision. 

h) (U//FOUQ) For sensitive UDP, OGC must provide a written determination lo the 
responsible FBIHQ operational unit and to the SORC. Wii bin live 15} business days, 
the responsible FBIHQ operational unit must submit an EC setting forth its 
recommendation to the SORC for consideration, The SORC must review the request 
along with OGC’s deiermi nation and provide a recommendation regarding approval or 
disapproval to the Director within thirty (30| caiendar days of the initial submission 
from the field office absent unusual circumstances. Hie SORC Maff must include die 
SORC's recommendation in a recommendation EC to the Director. The Director will 
determine whether lo grant or deny the UDP applying the Standards established in 
Section 16,5 above. The re sponsible FBIHQ operational unit must notify the requesting 
field office and the SORC by EC of the Director’s decision, 

1 6.9 A (U//FOUO) Procedures for approving emergency UDP requests tha t 

OTHERWISE REQUIRE FBIHQ APPROVAL 

(U//FGUO) FBI policy permits departures from DIOG requirements in special circumstances 
{see DIOG Section 2.7). If UDP that would otherwise require FBIHQ approval (e.g., an activity 
intended to influence the activity of an organization, or influence members of an organization 
First Amendment rights) is urgently needed because of the immediacy or gravity of a threat to 
the safety of persons or property, threats to the national security, or loss of a significant 
investigative opportunity, the SAC. with concurrence from the Deputy Assistant Director (DAD) 
of the FBIHQ operational section with oversight responsibilities for the investigation and a 
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Deputy General Counsel of OGC, may authorize the UDP, As soon as practicable after granting 
emergency UPP authority,, hut within 48 hours, the SAC’ or the FBI HQ DAD must provide an 
EC to the SORC, the operational division AD, and the GC describing the circumstances and 
necessity for authorizing emergency UDP, as well as whether continuing UDP authority is being 
requested 

iU TOUO) Upon receipt of the EC, the SORC staff shall obtain a determination from the 
relevant OGC Deputy General Counsel whether AD or Director approval is required and handle 
the matter accordingly. The operational division AD may disapprove the continuation of the 
UDP- If the UDP activity is continued and the Level of UDP would have required SORC 
consideration and Director approval if proposed in the normal course, the SORC staff will notify 
-<ther members of the SORC and describe the LDP. Unless a SORC member objects to the UDP 
upon receiving notice from the SORT staff, the UDP may continue until it is reviewed at the next 
scheduled SQRC meeting when the SORC w ill make a formal recommendation to the Director 
w hether the activity should continue. If a SQRC member objects to the level of UDP activity, an 
ad hoe meeting must be called, 

1 1 FQUO) Notwithstanding the above, alt UDP must be carried out in a manner consistent with 
the Constitution and the laws of the United Stales. 

16.10 fU) UDP Examples 

-Vi < L /FQUO) Example A : Andrew is a bartender in a local bar. He hears customers talking 
about a plan lo bring merchandise stolen from a freight container into the store next door and 
offer it for sale. Andrew contacts the FBI and tells the duty agent about the conversation. The 
agent lading the complaint asks. Andrew if he would he interested in continuing to provide 
updates on this plan as he hears about it. Ultimately, the bartender is opened as a CHS. 

(UTOUO) Anahits A : This is not UDP in an organisation. Andrew is participating in the 
conversations at the bar (not '’participating' 1, in an "organization's" activities). No UDP 
aulhorization is required. 

B) (U//FOLTO) Example B : Bart works on the loading dock of a regional distribution center. 
Truck deliveries from manufacturers arc made to the distribution center: the merchandise is 
off loaded and organized for shipment throughout the country in company trucks. Bart 
observes that delivery trucks frequently deliver counterfeit products with the full knowledge 
of the manager. These products are liven merged with other products for shipment to retail 
stores. Bart mentions this to an FBI agent and agrees to provide the FBI information On a 
regular basis about the operation. Bart is opened as a CHS and is told to record the license 
plates of trucks delivering counterfeit merchandise, the names of drivers, and the names of 
employees who assist in the ring. 

< U ’FOUO) Analysis B : This is UDP in an organization: Bart was initially acting on his own 
behalf in participating in the iwtivilksof the organization, but he is now participating on 
behalf of the FBI because he has been tasked to obtain specific information. In an Assessment, 
55A approval is required for this non-sensitive UDP which may be given at the same lime the 
individual is opened as a CHS. Iti a Predicated Investigation, no additional approval is 
required to utilize the CHS in this manner. Please note: there is adequate predication in the 
example discussed above to open a Prediesued Investigation, 
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C) (U//FOUO) Example C : Cindy regularly spends Saturday with a local group known as 
"friends of the environment" that undertakes cleanup projects, such as removing rubbish from 
waterfront areas and wilderness trail parks. Cindy hears members of the group discussing a 
large commercial development that is under construction Laking up what had been a 
picturesque spot on the river. Like other members of the group Cindy is outraged at 
developers who promoted the development and with city officials who approved it. She hears 
some members of the group discussing Citizen's Alliance, another organization to which they 
belong. Citizen's Alliance, in addition to holding peaceful demonstrations about the lack of 
environmental concern Ihe project is showing, plans to lake a more activist role in preventing 
the construction from moving forward. Cindy is uncomfortable with that idea, and she 
contacts the FBI about Citizen’s Alliance. The FBI has limited source reporting that Citizen’s 
Alliance is responsible for damage to cell phone towers built along a wilderness trail. The F'Rt 
asks Cindy to join Citizen's Alliance and to report to the FBI on its activities. Cindy agrees 
and the FBI office wants lo open Cindy as a CHS. 

(U//FGUQ) Analysis C l U Dp approval is required. Because Citizen's Alliance advocates 
through tic monstrat ions and public education about environmental issues, it is a legitimate 
group even though it may also be using destruction of property as a tool to deliver its message. 
The Citizen's Alliance purpose and activities make the participation by the CHS “sensitive 
UDP, M These facts, i.e„ source reporting that the group is responsible for the cell phone towers 
and Cindy's reporting that the group is planning a more activist role with respect to the new 
development, would support opening an Assessment on the group. Sensitive UDP during an 
Assessment requires CDC review and SAC approval to task a CHS to join and report on 
general information about the group. Concurrent approval car be requested in an EC to open 
Cindy as a CHS and approve her UDP in this sensitive organization. The SORC must he 
notified within 10 business days of the UDP approval. 

D) (IJ//KOUO) Example IT Later; a Predicated Investigation is opened on the Citizen's Alliance 
based on confirmation of the reports about damage to the cdl phone towers. Cindy, who is 
now a member of Citizen’s Alliance, is asked to provide information about the group, such as 
its membership and how it raises money, Cindy tells her handling agent that information is 
very lightly held within the organization. 

(U//FOUQ) An jK his D ; CDC review, SAC approval, and notice to tire SORC are required for 
this new tasking. Although now a member of the group, Cindy first joined Citizen's Alliance 
at the direction of the FBI; accordingly, her status will always be as someone tasked to join 
and provide information. 

E) (U '/FOLIO) Example E : Cindy is asked to be the secretary of the Citizen’s Alliance (a 
sensitive organization). This position involves performing, administrative tasks and taking 
notes at the group’s meetings. As a CHS, Cindy wants to continue to provide information to 
the FBI ohout die group’s possible criminal activities. 

(IV'FOUQ) Analysis E : The field office submits the request to FB1HQ to obtain a 
determination whether Cindy's UDP may influence the activities of the organization or the 
exercise of First Amendment rights by its members. Absent other facts indicating that Cindy's 
position is something more than merely administrative, OGC would conclude that Cindy’s 
position would not likely influence the activities of the organization nor the exercise of First 
Amendment rights by its members. The request, together with OGC’s written determination, 
will he relumed to the responsible FB1HQ operational unit, which will advise the requesting 
field office and the SORC ofOGC's determination. The field office will then be responsible 
for approving or denying the UDP request pursuant to subsections I 6 J, 1 .5, and lb-5. 
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F) (U//F0UQ) IA ample F : ("indy has row become a key member of Citizen's Alliance (a 
sensitive organization}and she Fas been elected lo the position of “activities chairman. 1 ' The 
role includes planning and organizing peaceful, lawful demonstrations, Cindy wants to 
continue providing the FBI with information about the group's possible criminal activities. 

(UtfFtKJO) Analysis F : Being selected to this position of authority within the organization 
w r hi!e being a CHS for the FBI is LDP that may influence the activities of the organization or 
the exercise of First Amendment rights of its members. Therefore, prior review by OGC is 
required before tasking her, OGC would conclude that Cindy’s role as activities chairman 
would likely influence the activities of the organization. Additional facts would lx needed to 
determine whether Cindy's activities may influence the exercise of the members' First 
Amendment rights. The operational AD would be able to approve the UDP iF First 
Amendment rights are not likely to be impacted. However, if the tacts indicate that Cindy may 
affect or have a pivotal role in the group’s decision making process when determining how, 
when or where it will exercise First Amendment rights, OGC would conclude that Cindy's 
new role is likely to have an influence on the First Amendment rights of members of the 
organization. This determination would require review by die SORC and approval by ihe 
Director. 

G) I'U/FGUQ) Example Li : An international terrorism Type 3 Assessment is opened seeking 
information about the connections John may have to those who an? associated with supporting 
terrorist organizations. There is intelligence reporting that John meets with Paul at a local 
church where he (Paul) solicits funds from church members to support an organization that is 
affiliated with terrorism. The ease agent tasks a CHS to attend a religious service that is open 
to the public to see if John is meeting with Paul. Lie CHS is tasked to attend up lo 5 times 
over die course of 3 months but never secs John at these services. The agent now wants to task 
a different CHS to attend the next five services to see if he can observe John meeting with 
Paul. 

(U'FOUO) Analysis Li : The attendance by the first CHS at five religious services open to the 
public is not considered UDP, Passive attendance oei live occasions or less (see footnote #8 
above) by a person who is not a member of the organization is not considered ’"participation” 
in the affairs of the organization for UDP purposes. However, ihc "Special Rule for Religious 
Services" requires the agent to obtain the prior approval of the SAG because the CHS was 
tasked lo attend die religious service during an Assessment (SSA approval is required for 
Predicated investigations). 

(U/FOUO) if the agent tasked the first CHS to attend more than five services or take an active 
role while attending those services, ii would require sensitive UDP approvals, i.e., review by 
the CDC, approval by the SAC, and notice to the SORC, The agent does not avoid the UDP 
requirements by tasking a different CHS lo perform the same task (looking for John lo meet 
with Paul) for an additional five services, 

(Ui'TGUO) Even if the tasking of the second CHS were for a different purpose and pan of a 
different Assessment or Predicated Investigation, ongoing or long-term attendance at a 
religious service may give the appearance that ihe FBE is monitoring First Amendment* 
proteclcd activity. In these circumstances, employees should consult with their supervisor and 
the CDC or OGC as to whether additional review or approval is appropriate. 

H t < L FOUG) Example H : A local non 'affiliated church holds Sunday services open lo the 
public in a strip mall. Other businesses in rhe strip mall include a gun dealer and an “drmy- 
navy store" selling survival equipment and military-style clothing. The minister who preaches 
at the Sunday service is also the owner of the “army-navy store." The FBI receives a tip that 
on the following Sunday a noted survival! st, who is also a major in the Freedom Militia, a 


16-17 

UNCLASSIFIED FOR OFFICIAL USE ONLY 


UNCLASSIFIED FOR OFFICIAL USE ONLY 
Domestic In vestigations and Operations Guide 

predicated domestic terrorist group, will be speaking, al the church. The Major is a predicated 
subject in another investigation, What approvals are needed to task a CHS to attend the service 
at which the Major will speak? 

(LI//FOUO} Analysis H : The CHS is not a regular attendee and is only being tasked to attend 
a single service for the purpose of crying to locale an mi subject. The CHS’s attendance under 
these circumstances would not be considered ‘'participation'’ for purposes of UDP. As sol forth 
in section 16.2 J.C> passive "infrequent attendance" (see footnote above) at a religious 
service that is open to die public (five occasions or less) hv a person who is not a member of 
the organization docs- not constitute iL participalion." Because the CHS is being “tasked 11 to 
attend a religious service, however, the Special Rule for Religious Services would apply. (See 
DIGG Section t B.5, 1.3,1 ) In an Assessment, the SAC must approve "tasking" a CHS Id atlend 
a religious service. In a Predicaied Investigation, S$A approval is required. 

] J (U//FOUO) Lvamoic I : In the course of a Predicated Investigation into whether certain 

leaders of a mosque are recruiting members to travel to Pakistan to obtain training al Al Qaeda 
training camps, a CHS k tasked to join the mosque. The CHS is directed not to participate in 
any private meetings with the Imam or any other officials or the mosque. He is directed only 
to report on information that is generally known to members of the mosque. 

fU/fFQUQ) Analysis I : This is □ sensitive UDP because it entails joining a religious 
organ Nation, Because the CHS has been tasked to join the mosque and report information he 
learns, review by the CDC and prior approval by the SAC arc required. If approved, the Held 
office must notify the SORC within Hi days following this approval, 

I) (U//FOUO) Example ,L Later in the Investigation, information is developed that the Imam 
and other members of the mosque are holding private meetings to discuss raising fluids to he 
remitted lo Hamas. The case agent wants to task the CHS lo ingratiate himself with ihcsc 
individuate in the hopes that he will be invited to attend those private meetings, 

(U//FQUQ) Analysis J : Because this is a Predicated Investigation, no additional approvals arc 
required in addition to the SAC approval already given, If this were an Assessment and the 
CHS were being tasked in the same way, review by GGC and approval by the responsible 
Assistant Director, w ith notice to the SORC, would be required- 

K.) (U/AFOUO) Example K : In the same investigation, the CHS has been asked lo join the Board 
of Directors of the mosque, There is no intent to influence First Amendment rights. If. 
however, the CHS is a member of the Board of Directors, simply by voting or discussing 
items on ihc Board's agenda „ it is likely that First Amendment rights will be affected. 

(U/TOUO) Analysis K : GGC and SORC review and approval by the Director are required. In 
deciding whether to approve, the Director will consider whether this level of UDP is necessary 
to meet a significant investigative goal that cannot he achieved without the UDP. 

L) (U.'/FOUO) Example L : In the course of a predicated counterintelligence investigation ., a 
UCF portrays herself as a college student. Consistent with her cover, she registers for classes 
on-line but does not actually attend any classes, take on-line classes, or use an email account 
affiliated with ihe college. 

(U//FOUQ) Ana lysis L l This does not constitute UDP because simply registering for 
university classes docs not constitute participation in the university's activities, if the UCE 
attends any classes or takes an on-line class, sensitive UDP approvals would need to be 
obtained. 

MKUtfFOUO) Example YU A Predicated Investigation is being conducted regarding a 

recognized and approved university fraternity that is alleged to be involved in drug activity. 


Pat4*d: 
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An Agent has developed a CHS (not a student K who has. become friendly with one of the 
fraternity members and the member has invited the CHS to come to the fraternity and 
participate in fraternity activities. The Agent tasks the CHS to participate in the fraternity 
activities and obtain information about the drug activity at the ffalcmily. The Agent obtains 
any necessary OIA approvals. 

(U//FOUG) Analysis M: This is a sensitive LID? because it involves undisclosed participation 
in an organisation having an academic nexus a student association).. Even though the 
CHS is not a student, he is being tasked to participate in the activities of this organization 
having an academic nexus. Since the CHS has been tasked to participate in and obtain 
information about fraternity activities, review by the CDC and prior approval by the SAC are 
required. If UDP is approved, the Field office must notify the SQRC within 10 days. 
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17 [U> OTHERWISE ILLEGAL ACTIVITY (OJA) 


17.1 (U) OVEKVttW 

(U//FQUO) Otherwise Illegal Activity (OIA) is conduct in the course of duties, by an FBI 
employee (to include an undercover employee (UCE)J ora confidential human source (CHS} 
which constitutes a crime under local, state, or federal law if engaged in by a person acting 
without authorization, OIA can be authorized for an FBI employee or CHS to obtain information 
or evidence necessary for the success of an investigation under the following limited 
circumstances; (i) when that information or evidence is not reasonably available without 
participation in the OIA; (ii) when necessary to establish or maintain credibility of cover identity 
in an undercover or covert investigation; or(iii) when necessary to prevent serious bodily injury 
or death. Certain types of OIA cannot be authorized, such as participation in conduct that would 
constitute an unlawful investigative technique (c.g., an illegal wiretap} or participation in an act 
of violence. Jn this context, "participation in an act of violence" docs not include acts taken in 
self-defense and defense of others by the FBI employee or CHS because such actions would not 
be illegal. 

17.2 £U] Purpose and Scope 

(U//FQUO) The use of OIA may be approved in the course of undercover activities or operations 
that involve an FBI employee or that involve use of a CHS. When approved, OIA should be 
limited or minimized in scope to only that which is reasonably necessary under the 
circumstances including the duration and geographic area to which approval applies, if 
appropriate. 

17.3 (U//FOUG) OIA in Undercover Activity 

(U7FOUO) (ten era! : The use of the undercover method is discussed in the DIOG Section 
IS. 6.13. OIA is often proposed as part of an undercover scenario or in making the initial 
undercover contacts before the operation is approved. Specific approval lor OIA must be 
obtained in the context of these undercover activities or operations in addition to general 
approval of the scenario or the operation. 

(U//FOUO) OIA by an FBI employee in an undercover operation relating to activity in violation 
of federal criminal law that does not concern a threat to the national security or foreign 
intelligence: must be approved in conformity with The Attorney Genera! 's Guidelines on FBI 
Undercover Operations f AGG-UCQ K Approval of OIA in conformity with the AGG-UCO is 
sufficient and satisfies any approval requirement thaL would otherwise apply under the AGG- 
Dom. Additional discussion is provided in the Field Guide far FBI Undercover and Sensitive 
Operations , A Special Agent in Charge (SAC) may approve the OIA described in subsection 
17.5. 


A) (U//FQUO) When a UCH provides goods and service (reasonably unavailable to the subject 
except as provided by the United States government) that facilitate a felony, or sis equivalent 
under federal, state, or local law-, it is a sensitive circumstance. In these sensitive 
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circumstances, additional authorization by an Assistant Director is required alter review by the 
Criminal Undercover Operations, Review Committee {CUORC). 

B) (U'VFOUO) Participation in otherwise illegal activity that involves a significant risk of 
violence or physical injury requires authorization by die Director, Deputy Director, or 
designated Executive Assistant Director after review by the CUORC. 

(U//FOUO) 01 A bv an FBI employee in an undercover operation (UCO) relating to a threat to 
the national security or foreign intelligence collection must conform to the AGG-Dom and the 
FBI’s National Security Undercover Operations Policy Implementation Guide (NSL'C’OPG). The 
Department of Justice fDOJ) National Security Division {N'SD) is the approving component for 
QfA that requires approval beyond that authorized for SAC’ approval described in DIOG 
subsection 17.5, below. However, as authorized by the Assistant Attorney General for NSD* 
officials in other DOJ components may approve O! A in such investigations. 

17.4 [U//FOUO] 01 A by a Confidential Human Source (CHS] 

(U&FOUQ) GIA by a CHS must be approved in conformity with the AGG-L’HS and the FBI 
CHSPG- 

17.5 (U//FGUO) Approval of 01 A by a Special Agent in Charge (SAC] - Not 
INCLUDING MATERIAL SUPPORT OF TERRORISM 

(U//FOUO) An SAC may authorize the following 01 A for an FBI employee when consistent 
with other requirements of this section, the AGG-Dnm, the AGG-UCO, and other FBI policy 
unless otherwise indicated. Except for subsections A. B, and E below, the following OlA 
activities require CDC review prior to SAC approval, unless otherwise indicated: 

A) (U//FCHJO) Otherw ise illegal activity that would not be a felony under federal, state, local, or 
tribal law; 

B) (U//FOUO) Consensual monitoring, even if a crime under stale, local, or tribal law'; 

1) fU/.'TQUQ) OmwhI tyf ait fuirties itr the aimmmtictJtion : For those slate, local and tribal 
governments that require all parlies to a conversation to consent to monitoring and do not 
sanction or provide 3 law enforcement exception for one-party consent recording of 
communications with persons within their jurisdiction, prior SAC approval for this OlA is 
required. Tins OlA approval authority is delegable to an Assistant Special Agent in Charge 
(AS AC) or Supervisory Special Agent {SS A). In most situations, the SAC of the employee 
who is seeking to conduct the consensual monitoring will be the approving official, for this 
OlA. Prior to the SAC authorizing the OlA, one-party consent must be acquired. 

a} (U/’TOUO) The law ! of the staEe or territory where the monitoring will take place will 
govern whether OlA approval is needed, 

b) (U//FOUO) Consensual monitoring authority and OlA in slates that require the consent 
of all-parties to the communication With no law enforcement exception for FBI 
employees and non-con fidential parties may be authorized for the duration of the 
investigation, unless specified otherwise, and appropriately documented. As noted in 
subsection 1 7,4 above, 01 A authority for a CHS can only be approved for 90 day- 
periods. as set forth in the AGG-CHS and the FBI CHSPG. Consensual monitoring QIA 
for CHS must be renewed every 91) days. 
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c) (U//FQU0) Sec the OGC website For a List of those slates that require consent of all 
parties to the communication and do not have a law enforcement exception. 

2) (li/.'TOUQ 1 ) FBI employee and non-confidential pat tv (OJA) ; When consensual monitoring 
will be conducted by an FBI employee or a non-confidential party where the consent of atj 
parties to the communication is required and there is no law enforcement exception for the 
FBL the GIA approval musi be obtained from the SAC of the employee who is seeking to 
conduct the consensual monitoring and documented in a properly executed FD-759 The 
FD-759 must be tiled in the appropriate ELSUR subfile. This approval authority is 
delegable to an ASAC or S3 A. Such OIA approval may be granted for the duration of the 
investigation, as long as the consensual monitoring circumstances do not materially 
change. 

3) {U/ FOUOj CHS tOfAl : When consensual monitoring will be conducted by a CHS in a 
slate or territory where the consent of all parties to the communication is required and there 
is tto law enforcement exception for the FBI, the OIA approval must he obtained From the 
SAC of the field office where the CHS is handled. This approval authority is delegable to 
an ASAC or SSA. The initial OLA approval for consensual monitoring must be 
documented in a properly executed FD-759. Such OIA approval may be granted fora 
maximum of 90 days, with no additional OLA documentation required for monitoring 
during that period, if it is necessary to extend the OIA for consensual monitoring beyond 
the initial 90-day period, another FO-759 may be used or, alternatively, such OLA for 
consensual monitoring may be requested, approved, and documented with an EC consistent 
with the AGOCHS and CHSPG, 

4) (U^FOUQ) Other approvals for the consensual moniforing may apply such as those 
required when the consensual monitoring involves a sensitive monitoring circumstance. 

See DLOG Section 18,6.1.6.3. 

C) (U//FOUO) The controlled purchase, receipt, delivery, or sale of drugs, stolen properly, or 
other contraband: 

E» (U//FOUO) The payment of bribes; 

(U//FOUO) Nme ; the payment of bribes and the amount of such bribes m a public corruption 
matter may be limited by other FBI policy (see the Public Corruption PG and Confidential 
Funding PG); 

E) (U^/FOCO) The making of false representations in concealment of personal identity or the true 
ownership of a proprietary: and 

F) (U//FOUO) Conducting a money laundering transaction or transactions involving an aggregate 
amount not exceeding S l million. 

U FOUO) The field office should notify the appropriate FBI HQ operational division and OGC 
of any OIA proposed activity that in the judgment of the approving official may expose 
employees or others to significant personal safety risks, create a risk of civil liability, result in 
®tfv erse publicity, or raise any other sensitive operational concern, As a matter of FBI policy, 
‘judgment” means that the decision of the authorizing official es discretionary, 

III FOUO) An SAC may not authorize a violation of export control laws or laws that concern 
Ac proliferation of weapons of mass destruction during an investigation relating to a threat to the 
Mfrcnat security or foreign intelligence collection. 
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17.6 (U//F0UO) 01 A Related to Material Support of Terrorism in 
National Security Investigations 

(U//FOUG) In accordance with Fart VC. 3 of the AGG-Dum, the Director of the FBI and the 
Assistant Attorney General for the NSD of the DOJ established the following policy concerning 
OlA as it relates to material support of terrorism in national security investigations (see EC dated 
01/1 6/2009* 3 1 9 W - HQ- A 1 4 S 7699-OGC Ser ial 35). 

A) (U//FGUO) If fluids, items, or services that will be provided to a subject as part of a national 
security investigation may eunsliiuic maicrial support to terrorism, an FBI, AD. with oral 
approval from the NSD, DOJ. may authorize die provision of such funds, items, or services if 
their value docs not exceed S2.000 per transaction and 510,000 per operation per year. The 
preceding sentence applies only if the goods or services are available to the general public and 
if the AD reasonably believes that the funds, items or services will not be used to pose an 
imminent significant threat to any individual. 

B) (U//FQUQ) NSD has represented that, except in exceptional circumstances, N5D shall act 
upon such an oral request w ithin 24 hours and shall, within 72 hours, provide the FBI 
documentation of the authorization, including any terms and conditions. 

C) (U//FOUO) Any request and approval musl be consistent with the terms and conditions of any 
license or non-objection agreement provided by the Office of Foreign Assets Control, 
Department of the Treasury, the Department of State, or the Department of Commerce. 

E>) (G//FOUO) Except in exceptional circumstances, any request for approval of OlA that may 
constitute material support to terrorism* other than chose described in paragraph A, must be 
trade in writing to NSD. 

(U//FOUO) Any questions about this policy or its implementation should be directed to OGC, 
National Security Law Branch. Counterterrorism Law Units. 

17.7 (U//FOUO) Standards for Review and Approval of OIA 

(LWOUO) No official may recommend or approve participation by an FBI employee in OlA 
unless the participation is justified; 

A) (LV/FOUO) To obtain information or evidence nceessaiy for the success of the investigation 
and not reasonably available without panic ipati on in the otherwise illegal activity; 

B) (U//FOUO) To establish or maintain credibility of a cover identity: or 

C) (U//FOUO) To prevent death or serious bodily Injury, 

17.8 (II) OIA NOT AUTHORIZED 

(U//FOUO) The following activities may not he authorized as OIA; 

A I (U/'TOUO) Directing or participating in acts of violence: 

(U//FOUQ) Note : Self-defense and defen.se of others. FBI employees are authorized to engage 
in any Lawful use of force* including the use of force in self-defense Or de ferae of others in the 
lawful discharge of their duties. 
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B) (IW/FOUQ) Activities or investigative methods that cannot tic authorized because they 

are prohibited by taw, including activities that would violate protected constitutional or federal 
statutory' Fights in the absence of a court order or warrant such as illegal wiretaps and searches, 
For example, approving it non-eunsensual non-emergency wiretap without a court order; 
approving the search of a home without a warrant or an esception to the warrant requirement, 
etc. 

17.9 [U] Emergency Situations 

(UA/FOUG) Without prior approval, an FBI employee may engage ir GlA that could be 
authorized under this section only if necessary to meet an immediate threat to the safety of 
persons or property or to the national security, or to prevent the compromise of an investigation 
or the loss of a significant investigative opportunity. In such a situation, prior to engaging in the 
OIA t every effort should be made by the FBI employee to consult with the SAC, and by the SAC 
to consult with the United States Attorney's Office (US AO) or appropriate IX)J Division w here 
the authorization of that office or division would be required unless the circumstances preclude 
such consultation- Circumstances in which OIA occur pursuant to this paragraph without the 
authorization required must be reported as soon as possible to the SAC, and by the SAC to 
FBIHQ and to the USAO or appropriate DOJ Division, 
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18 (U) INVESTIGATIVE METHODS 

18.1 (U) Overview 

18.1.1 (U) Investigative Methods Listed by Sub-Section Number 

(LI) The following investigative methods are listed by DIOG Sub-Section number: 

18.5. i (LI) Public information, 

18.5.2 (U) Records or information - FBI and DOJ. 

( 8-5.3 (U) Records or information - Other federal, state* local, tribal, or foreign government 
agency. 

18.5.4 (U) On-line services and resources. 

18.5.5 (U) CHS use and recruitment, 

18.5.6 (Ui Interview or request information from, the public or private entities. 

18.5.7 (U) Information voluntarily provided by governmental or private entities, 

MiU) Physical Surveillance (not requiring a court order). 

] 8.5.9 (U) Grand jury subpoenas - for telephone or electronic mail subscriber information only. 
IB. 6,1 (U) Consensual monitoring of communications, including electronic communications. 

IB. 6.2 (Ul Intercepting the communications of a computer trespasser. 

I 8,6.3 (U) Closed-circuit television/video surveillance, direction finders, and other monitoring 
devices. 

18.6.4 (U) Administrative subpoenas. 

18.6.5 (U) Grand jury subpoenas, 

IB. 6.6 (U) National Security Letters. 

18.6.7 (U) FISA Order for business records, 

1 8.6.8 (U) Stored wire and electronic communications and transactional records.. 

IB. 6.9 (U) Pen registers and trap/trace devices. 

1 8.6- 10 (U) Mail covers. 

18.6.1 1 (U) Polygraph examinations, 

1B.6-I2 (U ) Searches - without a warrant or court order, 
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I 1 1 (U) Undercover operations, 

1 MJ.. ( U) Searches w ith a warrant or court order. 

18.7.2 (U) Electronic surveillance - Title 111 

18.7.3 (U) Electronic surveillance - FISA and FISA Title VI! (acquisition of foreign intelligence 
information). 

1 8. 1.2 (U) In vestiga the Methods Listed by Na m (A i phabetized ) 

(U) The following investigative methods arc listed alphabetized by DICXJ name: 

(U) Administrative subpoenas. (Section 1 8. 6.4} 

( L) CHS use and recruitment. (Section 18.5.5 ) 

(U) Closed-circuit lelevision/video surveillance, direction finders, and other monitoring devices, 
(Section 18.6.3 ! 

(U) Consensual monitoring of communications, including electronic communications. (Section 

\MA) 

(U) Electronic surveillance - FISA and FISA Title VII (acquisition of foreign intelligence 
information). (Section 18.7.3) 

(U) Electronic surveillance - Title III. (Section 1 8 .7 .2 1 
(U) FISA Order for business records. (Section 38,6,7) 

(U) Grand jury subpoenas. (Section 18.6.5 1 

(1.1) Grand jury subpoenas - for telephone or electronic mail subscriber information only in Type 
] & 2 Assessments. (Section 1 8.5.9 ) 

(U) Information voluntarily provided by governmental or private entities. (Section 18.5.7) 

(U) Intercepting the communications of a computer trespasser, (Section 1 8,6.2) 

(LI) Interview or request information ftotn the public or private entities. (Section 1 8.5.6 ) 

(LI) Mail covers. (Section 18.6, IQ ! 

(U) National Security Letters. (Section 38.6.6 ) 

(Li) On-line services and resources. (Section 1 8,5.4 ) 
f LI ) Pen registers and trap'trace devices. (Section 1 8 .6.9! 

(U) Physical Surveillance (not requiring a court order). (Section 18.5,8) 

(U) Polygraph examinations, (Section 18.6. 1 1 1 


Yi?relnir JlnEetV 
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(U) Public information. (Section 18,5.0 

(U) Records or information - FBI and DOJ. (Section F8A2) 

(U) Records or information - Other federal, slate, local* tribal, or foreign government agency. 
(Section 1 8.5, 3 ) 

(U) Searches without a warrant or court order. (Section lW.d-12) 

(U) Searches - with a warrant or court order. I Section 38,7,1) 

(U) Stored wire and electronic communications and transactional records. (Section 18.6,8 1 
(U) Undercover Operations, (Section 18.6. 1 3 1 

18, 1.3 (U) General Overview 

(U//FOUO) The conduct of Assessments, Predicated Investigations (Preliminary Investigations 
and Full Investigations) and other activities authorized by the Attorney General’s Guidelines for 
Domestic FBI Operations (AGG-Dom) may present choices between the use of different 
investigative methods ( formerly investigative “techniques") that are each reasonable and 
effective based upon the circumstances of the investigation, but that are more or less intrusive, 
considering such factors as the effect on the privacy and civil liberties of individuals and the 
potential damage to reputation. The least intrusive method if reasonable based upon the 
circumstances of the investigation is to be used in such situations. However, the choice of 
methods is a matter of judgment. The FBI is authorized to use any lawful method consistent with 
the AGG-Dom, even if intrusive, where the degree of intrusivcncss is warranted in light of the 
seriousness of a criminal or national security threat or the strength of the information indicating 
its existence, or in light of the importance of the foreign intelligence sought to the United States' 
interests. (AGG-Dom* Part l,C,2.) 

(U> The availability of a particular investigative method in a particular investigation may depend 
upon the level of investigative activity (Assessment, Preliminary Investigation, Full 
Investigation* and Assistance to Other Agencies). 

1 8.2 [U) Least Intrusive Method 

(U) The AGG-Dom requires that Lhe "least intrusive’' means or method be considered and — if 
reasonable based upon the circumstances of the investigation — used to obtain intelligence or 
evidence in lieu of more intrusive methods. This principle is also reflected in Lxeeutivc Order 
12533 . which governs the activities of the United States intelligence community { US 1C). The 
concept of least intrusive method applies to the collection of intelligence and evidence, 

(IT) Selection of the least intrusive means is a balancing test as to which FBI employees must use 
common sense and sound judgment to effectively execute their duties while mitigating the 
potential negative impact on the privacy and civil liberties of all people encompassed within the 
Assessment or Predicated Investigation, including targets, witnesses, and victims. This principle 
is not intended to discourage investigators from seeking relevant and necessary intelligence, 
information, or evidence, but rather is intended to encourage investigators to choose the least 
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intrusive — yet still reasonable —means from the available options to obtain the material. 
Additionally, FBI employees should operate openly and consensual ly with United States persons 
(USPFRsj to the extent practicable when collecting foreign intelligence that does not concern 
criminal activities or threats to the national security. 

(U) DIOG Section 4,4 describes the least intrusive methods concept and the standards to be 
applied by FBI employees. 

18.3 (U) Particular Investigative Methods 

(U//FQUQ) All lawful investigative methods may be used in activities under the AGG-Dom as 
authorized by (he AGG-Dom. Lawful investigative methods include those investigative methods 
contained tn this DIOG as well as additional investigative methods and resources authorized in 
other FBI policy and guidance (for example, future additions to DKXi Sections 18. as well as 
Policy Implementation Guides) In some instances fhe authorized investigative methods am 
subject to special restrictions or review or approval requirements. (AGG-Dom. Pan V.A.) 

18. 3.1 (U) Use of Crimea i Investiga tive Methods in Na tional Security 

Investigations 

(L-'FGUO) Because national security investigations may implicate criminal issues as well, the 
availability of criminal investigative methods should be considered when appropriate. However, 
any use of criminal investigative methods should be closely coordinated with FBI HQ, both 
operational units and the NS LB. prior to any anticipated use of this criminal investigative 
process. The N5LR maintains liaison with DOJ Ol respecting the use of FISA authorized 
investigative methods in national security investigations. 

18.4 f U} Information or Evidence Obtained in Assessments and Predicated 
Investigations 


( l ■ l The use, retention and/or dissemination of information obtained during authorized 
investigations must comply with the AGG-Dom and the DIOG. If the originator of information 
reported to the FBI characterizes an individual, group, or activity in a certain way, and that 
characterization should be documented for completeness of the FBI record, the FBI record (i.e., 
302. EC. LHM) should reflect that another party, and not the FRI, is the originator of the 
cHracterization, 


4ng ihe course of an Assessment or Predicated Investigation. FBI employees lawfully 
* or passively receive items of evidence or intelligence from a variety of sourees. 
s demonstrated that the relevance of every item of evidence or intelligence 
>ed is not always apparent at the time it is obtained. Accordingly, FBI 
latitude to establish or determine the relevance of information as the 
■non develops. Nevertheless, as a matter of administrative efficiency and 
iti FBI employee obtains an item of evidence which clearly is not 
m creation and there is no foreseeable future evidentiary or 
*he FBI or the L SfC, the item should be relumed or destroyed 
-d of the disposition documented in the file or on the FD-71 
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or Guardian {FD-71 a). In the alternative, such Llc-m of evidence may be sequestered in the 
investigative file, If it is later determined that the item of evidence is relevant, the item may be 
used in the investigation upon such determination. The determination of relevancy will be made 
on a case-by-case basis with supervisory direction and may include consultation with the 
appropriate federal prosecuting office and-'orthe Chief Division Counsel (CDC) or the Office of 
the General Counsel (OGC). This policy does not supersede Sections IS. 6.4. 1,5 {Administrative 
Subpoenas); 18.6,5,3 {Federal Grand Jury Subpoena); 18.6.6J.7 {National Security Letters,); or 
18.6,7. 1.6 (FISA Order for Business Records), or any requirement imposed by statute, regulation 
or other applicable law. 

18.5 (U) Authorized Investigative Methods in Assessments 

(U) See AGG-Dom. Part ELA.4. 

(U//FOUG) An FBI employee must document on the FD-7t or in Guardian, the use of or the 
request and approval for the use of authorized investigative methods in Type I & 2 Assessments, 
Certain Type I & 2 Assessment situations may require the use of an F.C to document the use and 
approval of certain investigative methods. All authorized investigative methods in Type 3, 4. and 
6 Assessments must use an EC to document the use of or the request and approval for the use of 
the applicable investigative method. See DIOG Section 5.6J.4 for the investigative methods 
authorized in a Type 5 Assessment. 

(U) In conducting an Assessment, only the following investigative methods are authorized: 

A) (U) Public information. {See Section tB-5.1 1 

B) (U> Records or information - FBI and DDL {See Section 18.5.2 ) 

O (U) Records or information - Other federal. state, local, tribal, or foreign government agency. 
(See Seclion 18,5,3) 

D) (U) On-line services and resources. (See Section 18.5.4’] 

E) (U) CHS use and recruitment. (See Section 1 8.5,5) 

Vj . tew ’raqaeSv nfiumsfb on \i om 'in t pu'mic or private entities, lection ijO.b) 

G) (U) Information volum.inly provided by gnvenuiMsala/ or private entities. (See Section 18,5,7 ) 

H) (U) Physical Surveillance (not requiring a court order). {See Section 18.5.8 ) 

D ( U//FOUO) Grand j ury subpoenas - for telephone or electronic mai I subscriber information 
only {'during a Type 1 & 2 Assessment) (See Sections 18.5.9 and IB, 6, 5 1 

(U//FOUO) In Assessments, supervisory approval is required prior to use of the following 
investigative methods: certain interviews, tasking or a CHS, and physical surveillance not requiring 
a court order, During Predicated Investigations, supervisory approval requirements for these 
Investigative methods may not apply. 
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18.5.1 (U) INVEST1GA TIVE METHOD: PUBLIC INFORMA TION ("PUBLICL Y A VA1LABLE 

Information m ) 

(U) See AGG-Dom. Part IT,A.4.a and Part VII.L. 

13.5.1.1 (U) Scope 

(U//FOUQ) Public information is “Publicly Available Information" that Is: 

A) (U) Published or broadcast for public consumption: 

B) (U) Available on request to the public: 

Q (U) Accessible on-line or otherwise to the public: 

D) (U) Available to the public by subscription or purchase; 

E) (U) Made available at a meeting open to the public; 

F) (U) Obtained by visiting any place or attending an event that is open to the public (c.g., public 
places); or 

G) (U) Observed, heard, smelled, detected or obtained by any casual observer or member of the 
public and does not involve unconsented intrusion into private places. 

(U/7FOUO) The phrase “observed, heard, smelled, detected or obtained by any casual 
observer or member of the public" includes, for example, plain view observ ations; 
overhearing a conversation taking place at an adjacent tabic in a public restaurant; odor 
detection (by a person, drug dog, or technical device) emanating from a vehicle, in a public 
place, <?r from locations to which the employee has gained lawful access; searching property 
that has been intentionally abandoned, including property discarded in public trash containers 
or common dumpsters (but does not include a “trash cover" as set forth in DIOG Section 
18.6,12). 

(U/7FOUO) The following are examples: 

1) (U) Viewing the vehicle identification number or personal property that is exposed to 
public view and may be seen when looking through the window of a car that is parked in 
an area that is open to and accessible by members of the public; 

2) (U) The examination of hooks and magazines in a book store or the purchase of such items. 
Sec Maryland v. Macon, 472 US. 463 (1985}; and 

3) fU) A deliberate overflight in navigable air space to photograph marijuana plants is not a 
search, despite the landowner's subjective expectation of privacy. See California v. 

Clreolo. 476 US, 207(19*6). 

(U//FGUG) Note ; Consent Searches art authorised in Assessments, as well as in Predicated 
Investigations. 

(U//FGUO) Note: If the originator of information reported to the FBI characterizes an 
individual, group, or activity in a certain way, and that characterization should be documented 
for completeness of the FBI record, the FBI record (Le., 302, EC ; LHM) should reflect that 
another party, and not the FBI, is the originator of the characterization. 
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18.5.1.2 (U) Application 

(U//FOUO) This invc 5 iigg.ti.vc method may be used prior to opening an Assessment, in 
Assessments, Predicated Investigations, foreign intelligence col Lection invest i gallons, and for 
assistance to other agencies. 

18.5.1.3 (U) Approval 

(U//FOUO) Supervisory approval is not required for use of this method, except for the special 
rule for attending a religious service, even if it is open to the public. (See DIOG Section 
IS.5.UJ) 

18.5, 1 3. l ( U//FOUO ) Special rules: "Special Rule for Religious Services" a no 

M Special Rule for Other Sensitive Orga niza tions" 

18.5.0.1.1 (Li //FOLIO) Special Rl le for religious Services -regardless of 

WHETHER IT IS OPEN TO THE GENERAL FlBLIC 

A) {D//FOUO) hi Tasking a Cl IS to attend a religious service requires SAL 

approval, which cannot be delegated. An FBI employee attending a religious service overtly 
must have 5SA approval. Higher approvals may be required under certain circumstances, such 
as attendance that rises to the Level of UDP (see DIOG Section 16). Undercover activity is not 
permitted during an Assessment, 

B) (LWF0UO) hi Predicated In vestigatwm : Tasking a CHS to attend a religious service 
requires 55 A approval. An Fill employee attending a religious service overtly must have SSA 
approval. Higher approvals may be required under certain circumstances, such as attendance 
that rises to the level of UDP (see DIOG Section 16) or if attendance is part of an undercover 
operation (see DIOG Section 18.6.15). 

18AU.L2 (U//FOLTO) Special Ri le for Other Sensitive Organizations 

A ) (IWFOUD) In 4vMVMmiuv : T asking a CHS to attend an event or activity of a sensitive 
organization as defined in DIOG Section 16. IT, other than a public gathering that includes 
substantial numbers of Individuals who are not members of the organization (e.g., a public 
rally;. a conference to which ihe public is invited and is expected to attend}, requires SSA 
approval. Higher approvals may he required under certain circumstances, such as attendance 
that rises to the level of UDP (see DIOG Section 1 6). Undercover activity is not permitted 
during an Assessment. 

B) (D//FOLO) In Predicated frrvestiuatitms : No supervisory approval is required. Higher 
approvals may be required under certain circumstances, such as attendance that rises to the 
level of UDP (sec DIOG Section 16) or ifaltendancc is part of an undercover operation (see 
DIOG Section 18,6.13). 

IB, 5, 1.4 (UJ Use/ Dissemination 

(U//FQUO) The use or dissemination of information obtained by this method must comply 
with the AGG-DOm and DIOG Section 14. 


Verston Dated: 
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1 8.5. 2 (U) Investiga tive Method: Records or In forma tiqn - FBI and 

Depa r tment of Justice (DOj } 

(UI Sec AGG-Pom, Pan II.A 4.b 

18.5,24 { U ) Scope 

(U//FOUO) An FBI employee may access and examine FBI and other DOJ records and may 
obtain information from any FBI personnel or other DOJ personnel. Access to certain FBI 
records may be restricted to designated FBI personnel because of the sensitive nature of the 
information in the record* the classification of the record* or the too] used to gather the 
information contained in the record. These include, but are not limited Id: FB] records 
concerning human source identification; espionage investigations; code word; other 
compartinented information; records that include raw FISA collections: and Rule 6(e) 
material. 

(U//FOUO) Note: If the originator of information reported to the FBI characterizes an 
individual, group* or activity in a certain way, and that characterization should be documented 
for completeness of the FBI record, the FBI record {i.e. T 302, EL\ LHM) should reflect that 
another parly, and not the FBI, is the originator of the characterization, 

18.5.2.2 (II) Application 

(U/fFOUQ) This investigative method may be used prior to opening an Assessment* in 
Assessments, Predicated Investigations, foreign intelligence collection investigations* and for 
assistance to other agencies. 

18.5.2 .3 (U) Approval 

(U//FOUO) Supervisory approval is not required to use this method, except that if the use of 
records constitutes pattern -based data mining under the Federal Data Mining Reporting Act of 
2007, it must be reviewed and approved according to Section 18.5.2,4 below. 

18.5.2.4 (U) Patter h- B as fp Data Mining 

(U/TOUOJ As used here, pattern-based data mining (PRDM) means queries or other analysis 
of electronic databases using two or more search criteria designed In discover or locale a 
predictive pattern or anomaly indicative of terrorist or criminal activity on the part of any 
individual or individuals (as defined in Corporate Policy Directive 0330D), Any such analysis 
based solely on racial, ethnic, national origin or religious characteristics is strictly prohibited. 

(U//FOUG) For purposes of this requirement, patlcm-bascd data mining docs not include 
activities using one or more personal identifiers to identify an individual or analysis designed 
to discover links between a specific subject and unknown individuals or entities, even if the 
subject's actual identity is not yet known. Pattern-based data mining docs not include queries 
or analysis designed solely to identify potential human sources of intelligence nor does it 
include activities designed to identity an individual or individuals associated with criminal or 
terrorist activity that has already occurred. For example, database queries using multiple 
criteria to identify foreign visitors to the United States of a certain age and gender from 
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specific foreign countries who may engage in espionage is pattern-based data mining within 
the meaning of the statute, In contrast, database queries using criteria such a physical 
description and motor vehicle owned to identify possible suspects in a kidnapping do not 
constitute pattern-based data mining, because the queries are being used to investigate a crime 
that has already occurred. Queries designed to identify individuals or cut i lies who have had 
contact with a specific individual are not pattern-based data mining; rather, such queries are 
subject-based data mining, even if the specific individual's actual identity is presently 
unknown. 

(U//FOUO) The majority of data analysis performed during FBI Assessments and Predicated 
Investigations is based on specific individuals or events and therefore does not constitute 
pattern-based data mining because it is either link analysis or is not predictive of future 
behavior. 

{IT ■'FOLIO) A Privacy Threshold Analysis (PTA) for paiiem-based data mining must be 
completed and forwarded to the Privacy and Civil Liberties Unit, OGC. See the OGC Privacy 
PQ I'or additional details. 

(U//FOUO) The Sensitive Operations Review Committee (SGRC) must also receive notice of 
any proposal to use pattern-based data mining as defined above. Additionally, pursuant to the 
Federal Agency Data Mining Reporting Act of 2007 .. ’* the FBI musl advise the DQJ of all 
agency initiatives that involve the use of PBMD, so that those activities may be included in 
the Department's annua! report to Congress. (See CPD 03 1 0D. “Pattern-based Data Minina 
Report ins Requirements) . 

1 8 . 5.2 .5 { U) Use/Disse«[nation 

(U//FOUQ) The use or dissemination of information obtained by this method must comply 
with the AGG-Dom and DIOG Section 14. 

jU 'TOUQ) The request for the records and the records received from DQJ and used during an 
Assessment or Predicated Investigation must be maintained as part of the appropriate file 
(c.g., SOI Cl. seq classification illc, zero sub-assessment file, or investigation flic). 


11 [U] 42 U.$,C § 2000ee-3 
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1 A S3 (U) fNVESTIGA TIVE METHOD: RECORDS QR iNFORMA tip JV - 0 THEH FfPEHA L t 

State , Local, Tribal, or Foreign Government Agemcy 
(TJ) See AGG-Dom, Fart U.A.4.C. 

IB. 5. 3.1 (U) SCOPE 

(U//FOUO) An FBI employee may access and examine records maintained by, and request 
information from, other federal, state, local, or tribal, or foreign governmental entities or 
agencies. When requesting information using this authority, care must be taken to ensure the 
entity to which the request is made understands that it is not compelled to provide such 
information or create a new record to assist the FBI. 

(U//FOUO) Nate: If the originator of information reported to the FBI characterizes an 
individual, group, or activity in a certain way, and that characterization should he documented 
for completeness of the FBI record, the FBI record (i.e., 302, EC, LHM) should reflect that 
another party, and not the FBI. is the originator of the characterization. 

1 B. 5.3 . 2 ( U) Application 

IS. 5.3.3 {U/'FOUO) This investigative method may be used prior to opening an 

Assessment, in Assessments, Predicated Investigations, foreign intelligence 
collection investigations, and for assistance to other agencies. (U) Approval 

(U//FOUO) Supervisory approval is not required to use this method for "routine uses/* unless 
such approval is required by Memoranda of Understanding (MOU> or other agreements for 
requesting such information. 

(U//FOUO) Requests to other Federal Agencies : The FBI may request another federal 
agency to disclose Privacy Act-protected records pursuant to the other agency's "routine 
uses’* (5 U.S.C. § 522a[b][3J) or through a written request for a law enforcement purpose (5 
U.S.C. § 522a [b] [7]). Such written requests | for a law enforcement purpose) pursuant to 5 
U-S-C. | 522a(b)f7) may he made by the Director or h is designee, provided that such 
authority may not be delegated below the Section Thief level (28 C.F-R, § 16.4G[cj; OMB 
Guidelines, 40 Fed. Reg. at 28,955), Pursuant Eo these provisions, the Director hereby 
delegates his authority to request from federal agencies information and records otherwise 
protected from disclosure by the Privacy Act, at FBI I IQ. to all Section Chiefs and above, and 
in the field, to all SACs and A DICs This authority may not be redelegated to a person below 
the rank of SAC in the field and SC in FB1HQ, 

(U//FOUO) tieu nests t» to re tun Avencies : Requests for records or information from a 
foreign government entity or agency must be appropriately coordinated through the applicable 
FBI Legal office. International Operations Division (IOD), INTERPOL, relevant FBIHQ 
operational division, and/or POJ Office oflntcmationa] Affairs, as necessary' 1 . Direct contact 
wilh foreign government agencies is authorized in certain circumstances, such as an imminent 
threat situation, 
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(U//FOUO) If the analysts of records obtained in this manner constitutes PBMD under the 
Federal Data Mining Reporting Act of 2007, it must be reviewed and approved according to 
Section IB. 5. 2,3* above. 

(U//FOUQ) Example : An MOU at a local fusion center or a joint task Ibrce may specify 
procedures for the FBI to follow when requesting records Or information from state and local 
governmental entities or agencies. 

1 a. 5 .3 .4 [U] Use/ Dissemination 

(U//FOUO) The use and/or dissemination of information obtained by this method must 
comply with the AGG*Dnm and DIOG Section 14. 

(U//FGUO) The request For the records and the records received from an outside entity and 
used during an Assessment or Predicated Investigation must be maintained as part of the 
appropriate file {e.g., SOI ct. seq classification file, zero sub-assessment file, or investigation 

file). 


Vrtshin Dulrd. 
October E fv 20 I L 


18-12 

UNCLASSIFIED FOP OFFICIAL USE ONLY 


unclassified for official use only 

Domestic Investigations and Operations Guide 


§18 


18 , 5,4 (Uj Investigative Method: Online Services and Resources 

(U) See AGG-Dom, Fait ILAAd. 

18.5.4.1 (UJ Scope 

(U//FOUO) An FBI employee may use any publicly available on-line service or resource 
including those that (he FBI has obtained by subscription or pure base for official use, 
including services available only to law enforcement entities. 

(U//FOUO) Nate; If the originator of information reported to Lhc FBI characterises an 
individual, group, or activity in a certain way. and that characterization should be documented 
for completeness of the FBI record, the FBI record (i.e,, 302, EC, LHM) should reflect that 
another party, and not the FBI, is the originator of the characterization. 

18. 5.4.2 [U] Application 

(UFOUO) This investigative method may be used prior to opening an Assessment, in 
Assessments, Predicated Investigations, foreign intelligence collection investigations, and for 
assistance to other agencies. 

18.5.4.3 (UJ Approval 

( U FOUO) Supervisory approval is not required to use this method, although subscribing to 
or purchasing any new service or resource must be done according to FBI eon trading 
procedures, 

(U//FOUO) Example : Publicly available on-line services or resources include, but are not 
limited to: Google, Yahoo, or similar Internet search services. Online resources that may he 
purchased by the FBI for official use include, but are not limited to: data brokers such as 
ChoicePoint, West l aw, and Lexis-Nexis; and vehicle, casualty, and property Insurance claims 
databases such as Claim-Search, 

18.5.4.4 (Uj Use/ Dissemination 

(U//FOUOJ The use or dissemination of information obtained by this method must comply 
with the AGG-Dom. and DJOG Section 14. 

(UJ See DIOG Appendix L On-line Investigations for additional information. 


\V , rv:t,in n.in-'l- 
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18.5.5 (U) INVESTIGA TfVE METHOD; CHS USE AND RECRUl TMENT 

(U) See AGG-Dom. Part ll.A.4.e. 

18.5,5*1 (UJ Scope 

(EJ//FOUO) The FBI may use and recruit human sources in Assessments and Predicated 
Investigations in conformity with the AGG-Dom, Attorney General Guidelines Regarding tlie 
Use of FBI Confidential Human Sources (AGG-CHS h the FBI Confidential Human Source 
Program Guide (CHSPG1 . and the FBI Confidential Human Source Validation Source Manual 
tCHSVS M )■ In this context, “use" means obtaining information from, tasking, or otherwise 
operating such sources. See AGG-Dom, Part VI LV. 

(U//FOUO) Note. If the originator of information reported to the FBI characterizes an 
individual, group* or activity in a certain way, and that characterization should he documented 
for completeness of the FBI record, the FBI record (Lc.. 302. EC, LHM) should reflect that 
another party, and not the FBI, is the originator of the characterization. 

18.5.5 .2 (U ) Application 

(U/7FGUO) This investigative method may he used in Assessments, Predicated Investigations, 
foreign intelligence collection investigations, and for assistance to other agencies when it is 
not otherwise prohibited by AGG-Dom, Part 1 1 LB. 2, 

(L’l When collecting positive foreign intelligence* the FBI must operate openly and 
eonsensualiy with an U5PER. to the extent practicable. 

(U//FOUO! A CHS can be “used" in support of an Assessment and a Predicated Investigation 
or for the purpose of validating, vetting or determining the suitability of another CHS as part 
of an AsscssmcnL 

18.5.5.3 [UJ Approvals 

(U//FDUO) All investigative methods should be evaluated to ensure compliance with the 
admonition that the FBI should use the least intrusive method if reasonable based upon the 
circumstances of the investigation. That requirement should be particularly observed during 
an Assessment when using a CHS because the use of a CHS during an Assessment may be 
more intrusive than many other investigative methods, Use of a CHS in an Assessment should 
take place only after considering whether there are effective, less intrusive means available to 
obtain the desired information. The CHS must comply with all constitutional, statutory, and 
regulatory restrictions and limitations. In addition: 

A) (U//FOUO) CHS use and direction must he limited in focus and scope to what [% necessaiy lo 
accomplish the authorized purpose and objective of the Assessment or Predicated 
Investigation. The FBI employee's tasking of the CHS. to include the focus and scope, must he 
included in the FBI employee's report contained in DELTA. 

H) (U//F0U0) During an Assessment, a CHS may be directed to seek information ahoui an 
individual, group or organization (see the Special Rule for Religious Sen-ices and the Special 
Rule for Other Sensitive Organizations below)* only to the extent that such information is 
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necessary to achieve the specific objective of the Assessment. Ef such contact reveals 
information or facts about an individual, group or organization that meets the requirements to 
open a Predicated Investigation. a Predicated Investigation may be opened, as appropriate. 

C| (U//TOUO) Special Rule for Religious Services regardless of whether if is open to the 
general public: 

I ) < U//FQUQ) in Assessments : Tasking a CHS in attend a religious service requires SAC 
approval, which cannot be delegated. An FBI employee attending a religious service 
overtly must have SSA approval. Higher approvals may be required under certain 
circumstances, such as attendance that rises to the level of UDP (see DIOG Section 1 6), 
Undercover activity i$ not permitted during an Assessment. 

(U//FOUO:i In PmHauifl Inveyiiiwfiom : Tasking a CHS to attend a religious service 
requires SSA approval. An FBI employee attending a religious service overtly must have 
SSA approval. Higher approvals may be required under certain circumstances, such as 
attendance that rises to the level of UDP (see DIOG Section 16) or if attendance is part of 
an undercover operation (sec DIOG Section 1 8.6. 13). 

D| (U//FOUO) Special Rule for Other Sensitive Organizations: 

1) (U'TOUO) In A'i.'<ei\menr.'i : Tasking a CE IS to attend an event or activity of a sensitive 
organization as defined in DIOG Section 1 6. 1.3, other than a public galhmng that includes 
substantial numbers of individuals who are not members of the organization (e.g.. a public 
rally; a conference to which the public is invited and is expected to attend), requires SSA 
approval. Higher approvals may be required under certain circumstances, such as 
attendance that rises to the level of UDP (sec DIOG Section 16), Undercover activity is not 
permitted during aft Assewnent- 

2) (U//FOUO) In Pretlii titvtl itiv?\tixufitirri : No supervisory approval is required. Higher 
approval* may be required under certain circumstances, such as attendance that rises to the 
level of UDP (see DIOG Section 16) or if attendance is pan of an undercover operation 
(see DIOG Section 18,6,13). 

E) fLVFOUG) Public Information;: H'lhe CHS is not tasked Co join or participate in the 
activities of a legitimate organization (which must be approved in accordance with DIOG 
Section 16), tasking a CHS to find publicly available information or to reveal non-con lidcntial 
information to which the CHS already has access may be done without supervisory approval 
In an Assessment or Predicated Investigation. 

F) (LV.'FOUO) \on-Publie Information: Tasking a CHS to join or actively participate in the 
activities of a legi timate group or organization, including those in which die CHS is already a 
member or participating, for the purpose of obtaining information that is not publicly available 
from orahout the organization requires approval as "Undisclosed Participation* (UDP), as 
discussed in Section 16. During an Assessment, a CHS should nol be so tasked unless the 
information esnnoi be obtained through less intrust vie means and the information is necessary 
lo the Assessment. Furthermore, depending on the nature of the group or organization, such 
tasking may involve a First Amendment protected activity and trigger higher approval levels. 
See DIOG Section 16. 

G I (LWFOUO) A CHS cannot be tasked to do that which an FBI employee cannot legally do. 
Thus, for example, if a subpoena or court order is required lo obtain certain information, such 
as bank records or credit reports, a CHS cannot be tasked to obtain such information. This 
principle does nol, however, eliminate the legal concept of a consent search or the doctrine of 
misplaced confidence. The doctrine of misplaced confidence provides that a person assumes 
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the risk when dealing with a third party that the third parly might be a government agent and 
might breach the person's con itdence, Thus, by way of example, although the government 
would be required to have a search warrant to enter a person's premises involuntarily lo 
ascertain whether the premises are being used Id facilitate criminal conduct, the FBI is 
permitted to task a CHS to gain the owner's confidence so that the CHS can enter the premises 
based on an invitation from the owner to ascertain whether the premises arc being so used. 

H) (U//FOUO) If there is any conflict between the CHSPG, CHSVSM or any other PG and the 
DltXL the E3ICX5 controls, OGC, OIC andCPO should be immediately notified of any such 
conflict. 

18.5.5.4 (U) USE/DlSSEMhMATiQN 

(U//FOUO) The use or di&semi nation of information obtained by this method must comply 
w ith the AGG-Dom, D!OG Section 14. and the CHSPG. 
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18,5,6 (U) INVESTIGA TIVE METHOD: INTER VIEW OR REQUEST INFORM A TION FROM 

the Public or Private Entities 

(U) Sec AGG-Dom, Part II A.4.f; AGG-Dom, Part II. B 4. 

18.5.6.1 [UJ Scope 

(U//FOUO) An interview is the questioning of an individual (to include a subject) in order to 
gather information that is pertinent to and within the scope of an authorized Assessment or 
Predicated Investigation. The initial questioning of a complainant is not an interview* nor is 
re-contacting a complainant to clarify information that was initially provided. Normally, an 
FBI employee should disclose the employee’s affiliation with the FBI and true purpose of the 
interview' at the outset, The person being interviewed is voluntarily providing information and 
his/her Constitutional rights must be respected. FBI employees may not obtain a statement by 
force, threats, or improper promises, FBI employees have no authority to promise leniency or 
immunity from prosecution. Additionally* the interv iewer should make reasonable efforts to 
obtain information that is accurate, relevant. Limcly. and complete. An interview may only 
elicit a description of how an individual exercises a right guaranteed by the First Amendment 
to the Constitution if such information is pertinent to and within the scope of an authorized 
activity: similarly, regardless of how such information is elicited, it may not be maintained in 
FBI files unless it is pertinent to and within the scope of an authorized activity, 

(U//FOUO) Nothing in this section prohibits asking for or accepting volunteered access to 
personal or real property. 

(U//FOUO) Note: Consent Searches” arc authorized in Assessments, as well as in Predicated 
Investigations, 

(U//FOUG) Note: If the originator of information reported to the FBI characterizes an 
individual, group, or activity in a certain way. and that characterization should be diieumenlcd 
Ibr completeness of the FBI record, the FBI record (i.c., 302, EC, LHM) should reflect that 
another party, and not the FBI, is the originator of the characterization. 

1 B.S.6 . 2 ( U) APPLI cation 

(U/VFCKJQ) Interviews may be used prior to opening an Assessment, in Assessments, 
Predicated Investigations, assistance to other agencies* when it is not oiherw ise prohibited by 
AGG-Dom* Part ITI.B.2-3. FBI employees must not use any interview' technique that is in 
violation of the DIOG, the AGG-Dom or is abusive or coercive, regardless of whether a co- 
interviewer is in compliance with his/her agency’s guidelines. 

18,5,6^3 (II) Voluntariness 

(U//FOUO) Information that is sought during an interview must be provided voluntarily- FBI 
employees may rot obtain a statement by force, threats* or improper promises. FBI employees 
have no authority to promise leniency or immunity from prosecution. If t during a non- 
custodial interview, the interviewee indicates be or she wishes to consult an attorney, the 
interviewer should assess whether continuing the interview' would negatively affect the 
voluntariness of any further information provided. In determining whether a statement has 
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been given voluntarily, courts evaluate a “totality of the circumstances," which may include 
consideration of the follow ing factors: 

A) (U//FOUO) Whether the interviewee was notified of any charges against him/her or advised of 
his/her rights; 

BJ (LJ/'FOUO) The interviewee’s age, intelligence, experience, and physical condition; 

C) (U//FOUG) Whether there was any physical abuse or threats of abuse during the interview: 

D) (U//FGUO) The number of officers present and w hether weapons were displayed during the 
interview; 

E> (U//POUQ) Whether threats or psychological pressure was used during the interview; 

F) (U//FQUO) Whether the interviewer was deprived of food, sleep, medication, or outside 
communication during the interview; 

G) (U//FOUO) The duration of the interview, and whether any trickery, ruse, or deception was 
used: and 

1 1) (U//FOUO) Whether there were any promises oflenieney or other inducements made during 
the interview, 

(U//FOUO) See Sections 1 8,5,6 J ,8, 18.5.6,3.9, and 18.5.6,4.13 below for additional 
considerations when i ntervic wing juveniles. 

(U/FGUQ) These factors arc illustrative. The presence of any one or more of the factors 
mentioned above will not necessarily make a statement involuntary. 

18.5.6.4 [U] Approval / Procedures 

(U) With [he exceptions discussed below, interviews do not require supervisory approval. 

1 0, 5, 6.4 , 1 (U) Custodial Interviews 

(U//F0UO) An FBI employee must advise a person who is in custody of his/her Miranda 
rights, per form FD-395, before beginning an interview inside the United States with the 
exception of questioning reasonably prompted by a concern for public safety (discussed 
below). It is critical that the person understand his/her rights before questioning. By signing 
the I D-395, the defendant acknowledges that he/she has beer advised of his/her rights and is 
willing to proceed without a lawyer present. 

(U//FOUO) A person is “in custody' 1 for purposes of Miranda when his/her freedom of 
movement is significantly restricted. Custody can arise short of Formal arrest when, judging 
from the totality of the circumstances, a reasonable person in the position of the interviewee 
would believe that he/she is in custody. A brief, temporary investigative detention is not 
custody provided it is reasonable in scope. In assessing whether a temporary detention is 
reasonable in scope and thus not custody for purposes o f Miranda, factors to consider Include 
the degree of force used to affect the detention, use of restraining devices and whether the 
individual was moved from the location of the stop. Employees can clarify custodial status ", 
telling the person that he/she is not under arrest. 
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18,5.6,4, Li (U) Miranda Warnings Required 
(U//FQUO) Miranda warnings arc required when a person: 

A} (LJ//FQUO) Ha* been arrested and is in federal, tribal, state, or local custody; 

B) (U//FOUO) Is significantly restricted in his freedom o f movement to a degree normally 
associated with a formal arrest: or 

Cl (U //FOLIO) Regardless of custody, has previously been formally charged, prosecution is 
pending, and the subject matter of the interview concerns the pending charge. 

(U//FQUO) For the purposes of Miranda, an interview refers to express questioning and any 
words or actions that are reasonably likely to elicit am incriminating response. In a custodial 
interview, the individual must be advised of the names and official identities of the 
employee(s) conducting the interview, the nature of the inquiry, and provided Miranda 
warnings, per the FD095 form, before being interv iewed. After being advised of his/her 
rights, if an interviewee who is in custody, invokes the right to counsel and/or the right to 
remain silent, this must be honored and the interview must cease. However, once the advice 
of rights is provided and it is evident that the interviewee understood those rights, the 
interview may proceed until such time as the interviewee invokes a right. While an 
affirmative waiver, including signing a waiver portion of the FD-395 is preferred* it is not 
required. Once the interviewee invokes his/or her right to remain silent and/or right to 
counsel, the interview must immediate Ey be terminated. The fact that the interviewee invoked 
the right to counsel and/or the right to remain silent should be recorded on the FD-395 and the 
form should be executed in all other respects. 

1 B.5,6.4. 1 J (U) Mira sda Warn i nck in o r R y.qu i red 

(LV'FGLO) There are certain custodial interviews in which the protection Miranda provides 
against self-incrimination may not be served by reading the standard warnings and obtaining a 
waiver. In (he following circumstances. Miranda warnings are not required for custodial 
interviews: 

A ) (U'VFOUO ) Standard booking questions; 

B) (U//FQUO) an interview of the incarcerated individual as a victim or witness in an unrelaled 
matter that does not pertain to any pending charges against the interviewee; 

C) (U//FOUO) the public safety exception {discussed in more detail below); and 

D) (U//FOUO) in connection with arrests of operational terrorists inside the United States 
(discussed in more detail below), 

18*5,6.4, iJ (U//FOUG) Public Safety Exception 

{U//FOUO) The warning and waiver of rights is rot required when questions are asked 
that are reasonably prompted by a concern lor public safety. For example, if Agents make 
an arrest in public shortly after the commission of an armed o (Tense, and need to make an 
immediate inquiry to determine the location of the weapon, such questions may be asked, 
even of an In-custody suspect, without first advising the suspect of the warnings 
contained in Form FD-395, This public safety exception could also apply to other 
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situations where imminent threads) to the safety of law enforcement officers or 
memberis) of the public could he alleviated by questions necessary to neutral ize the 
threat. 


1 8.5,<UL1 ,4 { LI //FOUO) ADVICE OF RIGHTS IN CONNECTION WITH ARRESTS OF 

OPERATIONAL TERRORISTS INSIDE THE L' Nil ED STATES 12 

(U//FOUO) Identifying and apprehending suspected terrorists, interrogating I hem to 
obtain intelligence about terrorist activities and impending terrorist attacks, and lawfully 
detaining them so that they do not pose a continuing threat to our communities are critical 
to protecting the American people. The DOJ and the FBI believe that we can maximise 
our ability to accomplish these objectives by continuing to adhere to FBI policy regarding 
the use of Miranda warnings for custodial interrogation of operational terrorists 113 who 
arc arrested inside the United States: 

A) (U//FDUO) If applicable, agents should mk any and all questions that are reasonably 

prompted by an immediate concern tor the safety or Che public or Ehc arresting agents without 
advising the arrestee of his Xfirtmda rights. IJ 

Bj (Uf/FOUG) After all applicable public Safety questions have been exhausted, agents should 
advise the arrestee of his/her Miranda rights and seek a waiver of those rights before any 
further interrogation occurs absent the exceptional circumstances described below. 

C) (U//FOUO) There may be exceptional cases in which, although all relevant public safety 
questions have been asked, agents nonetheless conclude that continued unwarned interrogation 
is necessary to collect valuable and timely intelligence not related to any immediate threat, and 
that the government's interest in obtaining this intelligence outweighs the disadvantages of 
proceeding with unwarned interrogation. 


u (U//FOUGJ This guidance applies only to arrestees who have not been indicted and who are not known to 
be represented by an attorney, For policy concerning the interrogation of indicted defendants, see Section 
18,5.6,4,1 ; and for policy concerning contact with represented persons, see DIOG Section 18.5.6,4,5, 
L3 [U//FOUG) For these purposes, an operational terrorist is an arrestee who Is reasonably believed to he 
either a high-level member of an international terrorist group; or an operative who has personally conducted 
or attempted to conduct a terrorist operation that involved risk to life; or an individual knowledgeable about 
operational details of a pending terrorist operation, 

“EW/FGUOJ The Supreme Court held in JVeiv York v. Quarles, 467 US. 649 (1984), that if law enforcement 
officials engage in custodial interrogation of an individual that is '’reasonably prompted by a concern for the 
public safety," any statements the individual provides in the course of such interrogation shall not be 
inadmissible in any criminal proceeding an the basis that the warnings described in jtfrran da V. Arizona, 384 
U.S. 436 (1966), were not provided. The Court noted that this exception to the Miranda rule is a narrow one 
and that In each case it will be circumscribed hy the {public safety) exigency which justifies it," 467 U_S. at 
657. 

^[U//F0LJ0) The Supreme Court has strongly suggested that an arrestee's Fifth Amendment right against 
self-incrimination is not violated at the time a statement is taken without Miranda warnings, but instead may 
be Violated only if and when the government introduces an unwarned statement m a criminal proceeding 
against the defendant, See Chavez v Martinez, 538 U.5. 750, 769 [20-03) (plurality op-); rtf at 789 (Kennedy, f., 
concurring In part and dissenting in part); ef aka id. at 778-79 (Snuter. j.. concurring In the judgment); See 
also United States v. Potane. 542 U.5. 630, 641 (2004) [plurality opinion) ("I Violations [of the Fifth 
Amendment right against seif- in trim! nation] occur, if at all, only upon the admission of unwarned statements 
into evidence at trial,"); United States v. Verd vg a -UryuideZ, 494 U.S, 2£9. 264 (1990) ('(A) violation [af the 
Fifth Amendment right against self-incrimination) occurs only at trial"). 
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(U//FOUO) In these exceptional cases. agents must seek SAC approval, which cannot be 
delegated, IO proceed with an unwarned interrogation after [he public safety questioning is 
concluded. The SAC must consult with KBEHQ (including (XiC'j and DOJ attorneys before 
granting approval, Presentment of an arrestee may not be delayed simply to continue the 
interrogation, unless the arrestee Itas timely waived prompt presentment. 

{ U.' FOUO) The determination whether particular unwarned questions are justified on 
public safety grounds must always be made on a case-by-case basts based on all the facts 
and circumstances. In light of the magnitude and complexity of the threat often posed by 
terrorist organizations, particularly international terrorist organizations, and the nature of 
their attacks, the circumstances surrounding an arrest of an operational terrorist may 
warrant significantly more extensive public safety interrogation withoul Miranda 
warnings than would be permissible in an ordinary' criminal investigation, Depending on 
the facts, such interrogation might include, for example, questions about possible 
impending or coordinated terrorist attacks; the location, nature, and threat posed by 
weapons that might pose an imminent danger to the public; and the identities, locations, 
and activities or intentions of accomplices who may be plotting additional imminent 
attacks, 

(U//FQU0) As noted above, if there is lime to consult with FBI I IQ (including OGC) and 
Department of Justice attorneys re carding the interrogation strategy to be followed prior 
to reading the arrestee his Miranda rights, the field office should endeavor to do so. 
Nevertheless, the agents on the scene who arc interne ting with the arrestee are in the best 
position to assess what questions arc necessary to secure their safety and the safety of the 
public, and how long the post-arrest interview can practically be delayed while 
interrogation strategy is being discussed. 

18 5 6 4 2 (U//FO VO) Miranda Warnings for Suspects in Custody Overseas 

(U/.TQUO) The decision to use or not use Miranda warnings during an overseas custodial 
interrogation will have to be made on a case by case basis and weigh many factors. Overall . if 
there is a reasonable likelihood of a prosecution in a U.S. civilian criminal court of the person 
being interrogated w hile in custody overseas, agents should discuss with FBI! IQ, FBI OGC, 
and DOJ w hether warnings should be provided to the person being interrogated. Once the 
determination is made to provide Miranda warnings as part of an overseas custodial 
interrogation, if the person being interrogated invokes his right to remain silent or consult 
with an attorney, this invocation should be honored. If use of Miranda warnings is appropriate 
given the circumstances of the case, the following DOJ -approved modified waiver Idem 
should be used. The form is the Standard Advice of R ights l or Suspects m Foreign C ustody . 

1 a 5 , & 4,3 (V) Constitutional Rights to Silence and Counsel under Miranda 

A) (U//POUO) Sitemr ; If a custodial interviewee invokes tiisftier right to remain silent, FBI 
employees should not attempt a subsequent interview until a significant period of lime has 
elapsed (a two-hour period has been held to be significant) or the interviewee requests to be 
interviewed anew. In either ease, an f'rtl employee will ensure dial the imerview-ee is again 
advised of his/her Miranda rights and indicates that hc/she understand those rights before 
further question ing. If the interviewee again asserts higher right to remain silent or the right to 
counsel, questioning must cease at that time, Assertion of the right to silence, like assertion of 
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the right to Counsel, mttsC be ml equivocal and unambiguous, A waiver of the right to remain 
silent occurs when an interviewee knowingly and voluntarily makes a statement: assertion of 
the right to remain silent requires more than mere silence in the face of questioning. This right* 
Like the right to counsel, can be invoked at any time during custodial interrogation. Agents 
may continue questioning someone who has not clearly invoked his/her right to remain silent, 
but if the custodial interviewee asserts his/her right to silence, questioning musi cease at that 
time, 

3} (U//FOUO) L'&mviei : If a custodial interviewee invokes his/her right to counsel. questioning 
must cease. FBI employees may not attempt a subsequent interview unless counsel is present, 
the custodial interviewee initiates contact, or there has been a break in custody of at least 14 
days. 

I) (Uj-VTOUO) When a custodial interviewee who has invoked his/her right to counsel 
initiates a subsequent interview, an FBI employee must ensure that the interviewee is 
advised of and understands his/her Miranda rights before proceeding with the interview, 
Not every statement by a custodial interviewee can fairly be interpreted as initialing a 
subsequent interview, j n order to constitute the initiation of an interview, the custodial 
interviewee must either directly request such or use words that are reasonably interpreted 
as expressing a desire to be interviewed. If the words used are ambiguous* die FBI 
employee should clarify the custodial interviewee's intent by asking directly whether the 
custodial interviewee wants to be interviewed. The words and responses, if any, to such 
clarifying questions should be documented. General conversation by a custodial 
interviewee cannot be interpreted as indicating a desire to be interviewed and cannot be 
used standing alone to predicate a second interview alter the right to counsel has been 
invoked. If the interviewee again asserts his/her right to counsel, or invokes his/her right to 
silence, questioning must cease at that time. 

7) (U//TQUO) when an uncharged aod/or unrepresented interviewee who has previously 
invoked his/her right to counsel experiences a break-in-custody of at least 14 days, he.'she 
may be approached for a subsequent interview-, FBI employees, however, musl ensure that 
the Custodial interviewee is again advised of and waives tmher Miranda rights before 
proceeding with the interview. A break-in-custody for these purposes can occur even if an 
interviewee is continuously incarcerated. Questions as to what constitutes a break-in- 
custody should he directed to the CPC or iXiC, 

3) (U/TOUO) Contact with a represented person outside the presence of his ’her counsel may 
implicate stale ethics rules for attorneys (AUSAs). Before making such contact, employees 
are encouraged to contact (he CDC, QGCYor the US AO. Once a represented person has 
been charged, informal ion may only be elicited from Lite person: 1) regarding an unrelated 
or uncharged mailer or 2> when counsel is present. Questions as to whether an individual is 
in fact represented or may be questioned as to a particular matter should he directed to the 
CDC orOGC. 

l ft 5 . fi , 4. 4 (U) Sixth Amendment Rich t to Counsel 

(U//FOUO) The Sixth Amendment Right to Counsel requires the government to advise and 
obtain a waiver of the Right to Counsel prior to interviewing the person to whom the right ha* 
attached. The Right to Counsel attaches upon indictment regardless of whether the indicted 
person realizes an indictment has been relumed. The Right to Counsel also attaches upon the 
filing of information and at the time of an initial appearance on a Federal Complaint. The 
Right to Counsel is offense specific. When applicable, a waning regarding the Right to 
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Counsel and subsequent knowing and voluntary waiver must occur prior to an interview, 
regardless of whether the person is in custody. Providing a person with a Miranda warning 
and obtaining a waiver per the use of Form FD-395 will permit the interview of the person 
after the Right to Counsel has attached. The Sixth Amendment right to counsel does not 
prohibit the government from re-contacting the subject if the subject refuses initially to waive 
this riglH or otherwise has requested or obtained counsel following an Initial Appearance. 
However, further attempts to interview the subject may be prohibited if the subject invoked 
his right to counsel and remained in continuous custody or there was an insufficient break in 
custody {consistent with Mrutuia and its progeny). In addition, due to concerns associated 
with contact with represented persons fSee tS-5.6.4.5), guidance from the CDC or OGC 
should be obtained before contact is made with a subject who has obtained or requested 
counsel if the contact relates to the crime charged and the subject’s counsel has not been 
notified, 


1 8.5. 6.4.5 (U) Con tact with Represented Persons 

(U//FOUQ) CDC or OGC review is required before contact with represented persons in the 
absence of prior notice to counsel . Such contact may implicate legal restrictions and affect the 
admissibility of resulting evidence. Hence, if an individual is known to be represented by 
counsel in a particular matter, the CDC must follow applicable law and DOJ procedure when 
reviewing the request lo contact the represented individual in the absence of prior notice to 
counsel. The SAC. CDC. or their designees, and the United Slates Attorney or his or her 
designees must consult periodically on applicable law and DOJ procedure relative to contact 
with represented persons. The field office may raise inconsistent application of: (i) state ethics 
rules, or (ii) rules for contacts with represented persons with the USAO and request that it 
consult with the DOJ Professional Responsibility Advisory Office. (AGG-Dom. Part V.B.I) 

1 8.5. 6.4. 6 (U) Members of the Unwed Sta tes Congress and their Staffs 

(U//FQUQ) Generally, FBI employees may accept information offered from Congressional 
offices just as they would accept information from other sources, and they may act upon it 
accordingly. SAC and appropriate FRJHQ Al> approval, and prior notice to the AD Office of 
Congressional Affairs {OCA), are required if an employee seeks to: (i) establish an informant 
relationship with a Member of Congress or with Congressional staff; (ii ) interview a Member 
of Congress or Congressional staff in connection with a public corruption matter; or (id) 
interview a Member of Congress or Congressional staff in connection with a foreign 
counterintelligence matter. The FBI HO operational division policy implementation guides 
(PCs) may contain additional notice requirements. 

18.5.6.4.7 (V) White House Personnel 

(U//FOUO) FBI employees may aeecpt information offered by White House personnel just as 
they would accept information from other sources, and they may act upon it accordingly. SAC 
and appropriate FBI! [Q AD approval, after consultation with OGC, is, however, required 
before initiating contact w ith While House personnel as part of an investigation, SAC and AD 
approval (from the appropriate operational division), after consultation with OGC, is also 
required if an employee seeks to establish an informant relationship with any member of the 


18-25 

UNCLASSIFIED - FOR OFFICIAL USL ONLY 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


§18 

White House staff. Additional guidance regarding contact with White House personnel may 
be found in the AG Memorandum captioned '‘Comm unicat ions with White House and 
Congress’ 1 dated May 11. 2009, (See DIOG Appendix D) Note ; The FBI HQ operational 
division PC is may contain additional notice requirements lor conducting interviews or seeking 
an informant relationship with While House personnel. In addition personnel assigned to the 
Washington Field Office may, after 0GC approval, obtain authority to contact W r hile House 
personnel on routine investigations where While House personnel may have been a victim or 
witness. 

1 8.5. 6.4.8 (U) Members of the News Media 

1 8,5 + M,8 + 1 (HI A pfro v al Requ i rem en ts 

18.5.6.4,8.1.1 fit CitWfRAL Rlofirlmlms 

(U//FOUO) Attorney General approval must be obtained prior to conducting an interview 
of a member of the news media for any offense which the member of the news media is 
suspected of having committed in the course of or arising out of the coverage or 
investigation of a news story, or while engaged in the performance of his/her official 
duties as a member of the news media. Requests for this approval must be submitted with 
an EC to the AD of the operational FU! HQ division that es responsible for the 
investigative classification and the AD of the Office of Public Affairs (GPA), The 
requesting EC must be reviewed by the CDC and approved by the SAC after coordinating 
the request with the local US AO, The EC must contain the necessary facts and 
investigative justification for the interview consistent with the DOJ guidelines set forth in 
28 C.F.R. §50.10. 

/ 8.5. 6. 4.8, L 2 (U) EMERGENCY ClRCt 'MSTANCES REOCKEMENTS 

(U//FOUO) In emergency circumstances, an Agent may interview a news media 
representative concerning an offense which the member of the new r s media is suspected 
of having committed in the course of. or arising out of. the coverage or investigation of a 
news story, or while engaged in the performance of his/her official duties as a member of 
the news media without prior AG approval, if authorised by the SAC and the United 
Slates Attorney. Immediate notification of the interview, the emergency circumstances 
that justified proceeding without prior authorization and all the information that would 
have been provided if prior authorization had been sought shall be communicated 
immediately to the AD of the FBIHQ operational division, the AD of the OPA. and the 
General Counsel. The AD of the operational division is responsible for notifying the 
appropriate officials at DOJ as set forth in 28 C.F..R, SO, 10, After these oral notifications 
have been made, the field office is responsible for providing written documentation to the 
FBIHQ operational division AD as soon as practicable, but not more than 24 hours after 
the interview. FBIHQ is responsible for providing appropriate written documentation to 
the DOJ approval authorities to whom oral notice was given. 


Vcrsiua tinted. 
October IS, 2015 
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18,5,6*4.8,2 (L 1 ) Use of Subterfuge 

(U//FOUO) To the extent operational needs allow, investigators must operate openly and 
consensual ly with members of the news media. If an interview of a member of the news 
media involves ary subterfuge (whether the purpose of the interview is related to the 
news gathering dreumstanees set forth in the preceding paragraph or otherwise), the 
interview and the subterfuge must be approved by the AD of the operational division 
responsible for the investigation. The EC requesting permission must include the facts 
and circumstances surrounding the interview, including an explanation why the 
investigator cannot operate openly and consensual ly with the news media person to be 
interviewed. Additionally, the EC must include a description of the planned subterfuge. 
After consultation with the OPA and OGC, the AD of the operational division must 
decide whether to approve the request. If the request requires approval by DOJ (because 
the inten iew is related to an offense committed by the member of the new s media during 
the course of news gathering) the AD of the operational division is responsible for 
submitting all requests for approval to the DOJ per 28 C.F.K. 50.10. 

(U//FOUO) FBI HQ operational division PGs may contain additional notice requirements, 

1 R5 6 A, 9 (U) During an Assessment - Requesting Informa tion without Revea ling FBI 

A FFIL1A TION OR THE TRUE PURPOSE OF A REQUEST 

A) (U//FOUQ) In the normal course of an interview, an FBI employee should divulge the 
employee's affiliation with the FBI and the true purpose of the interview. FBI employees must 
operate openly and eonsensually with members of the public during an Assessment unless 
operational considerations preclude the disclosure of true affiliation or purpose, in which case, 
employees must adhere to the policies listed below. 

B) (U//FOUO) During an Assessment, an FBI employee may request information without 
disclosing the true purpose of the request provided that the false purpose would not reasonably 
be expected to violate the rights or damage the reputation of another person and provided the 
false purpose does not imply that adverse legal consequences may follow if the interviewee 
declines to speak to the FBI employee. 

C) (U//FOUO) Undercover activity is not authorized during an Assessment. "Undercover 
activity" includes the use of false identity to obtain intelligence or evidence from a subject or 
other person of interest. 

D) (tJ/'TOUD) An FBI employee is not required to affirmatively disclose his or her FBI 
affiliation if non-disclosure is reasonably necessary to achieve the purpct&e of the Assessment 
and the FBI employee is: 

1) (U//FOUO) Attending a public event or place (including presence in publicly accessible 
on-line space or venue) on the game terms as a member of the general public; 

2) (UVFOUOl Present at a public event or place (including a publicly accessible on-line space 
or venue) and the employee is invited to engage in a limited follow-on conversation with a 
third party outside of the public event or place (or online space or venue); 

3) (U//FGUQ) Engaged in incidental contact or interaction with members of the public or 
private entities; 

4) (U//FOUQ) Engaged in limited interaction to protect cover; 
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5) ( UZ/FOLIO) Tacitly representing him or herself a& an associate of another law enforcement 
ofiieer; 

h) flJ.-'/FOUO} Engaged in a properly authorized Type 5 Assessment; or 
7) | U//FOUO) Engaged in limited inlcraeiion with a Lhrrtl party. 

(U//FOIJO) For each circumstance above, an employee's. FBI affiliation, should only be 
withheld if doing so is not reasonably expected to adversely affect the rights or damage 
the reputation of another person or to have reasonably anticipated legal consequence. 

(U//FOUO) In a Type 5 Assessment to vet a potential source, alias/faise identity 
documentation (A FID) may be used for the limited purpose of vetting a potential source 
if done in accordance with the CI1SPG. AFID may not be used with the intent to collect, 
or with the expectation of collecting, intelligence or evidence through conversations with 
a subject or other person of interest — as this activity may constitute undercover activity, 

(L-.'VFOUO) The authority to withhold disclosure of FBI affiliation does not extend to an 
interview seeking intelligence or evidence material lo an Assessment, Conducting an 
interview without disclosing FBI affiliation may constitute undercover activity, which is 
prohibited in an Assessment. If FBI affiliation has been withheld and intelligence or 
evidence has been revealed unexpectedly, the FBI employee may continue (o receive 
information voluntarily provided by the other party. The FBI employee must document 
and report the circumstances lo a supervisor at the earliest opportunity. 

1 8.5. 6.4.10 (U) Consult a tion and DISCUSSION 

(Li //FOUO) The authorities granted above to engage members of the public without disclosing 
the true purpose of the request and to engage in limited interaction with the public without 
affirmatively disclosing l BE affiliation are intended to provide an effective, efficient, and 
timely means to resolve Assessments. At the same time, this policy is designed to prevent 
inadvertent noncompliance with the prohibition on undercover activity during an Assessment 
by, for example, using a false identity (including Alias False Identification (AFID)) to 
conduct an interview seeking intelligence or evidence during an Assessment. There will not 
always he a bright line between undercover activity and authorized interaction with the public 
in some operational scenarios. FBI employees are strongly encouraged lo consult with I he 
CDC orOGC when questions arise regarding use of this section. During an Assessment, if 
there is any doubt about whether the plan constitutes undercover activity, the FBI should not 
proceed wish the plan, 

18.5.6.4.11 (U) Examples 

18,5.6.4,11.1 (U) Lx AMPLE l 

(LV/FOUO) During an Assessment, for the punpose of conducting limited surveillance, an 
agent attends a motorcycle rally open to the public without disclosing his FBI affiliation. 
On arrival, the agent is asked to show some ID and sign in. May the agent produce a false 
driver s license and sign in under an alias? 
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(U//FOUO) Answer: Yes, utils limited interaction and use of A FID is permitted in this 
circumstance to protect the agent's cover, 

18*5*6.4.1 1.2 (U) Example 2 

(UflFOUO} During an Assessment, an agent seeks to I cam whether a particular 
individual still resides in a particular dangerous neighborhood. She plans to wear a UPS 
shirt and carry a clipboard into an apartment building and knock on some doors asking if 
the individual has moved from the building. May the agent proceed in this manner? 

(U//FOUO) Answer : Yes, this constitutes engaging in limited interaction with a third 
party. Although the agent intends to have contact with members oTthe public, her 
interaction is limited and not designed to obtain information regarding the third, party. 

I&5.6.4.UJ (U) Example! 

(U//FOUO) During an Assessment, an agent surveilling a subject Hollows the subject into 
an office building. The building security requires everyone entering to sign in but docs 
not check ID. The surveillance agent is asked to sign a register, docs so using a false 
name, and continues the surveillance, May the agent do this? 

(U//FOUO) Answer : Yes. this is a good example of engaging in incidental contact to 
protect cover. It could also be considered incidental contact or interaction with members 
of the public or private entities. 

18J&411.4 (10 Example 4 

(U//FOUQ) During an Assessment, an agent is seeking to determine the whereabouts of 
John Doe. The agent discloses his identity to one of Mr. Doe's neighbors and falsely tells 
the neighbor that he has reports that Doe was front and center In a crowd during which 
several foreign students were pelted with eggs and chided to leave the university campus 
because they were occupying seats that should go to taxpayers. The agent implies to the 
neighbor that it is very important to be able lo establish that Doe was not, in fact, in the 
crowd. May the agent use this false statement of purpose? 

(U//FOUO) Answer : No, this would damage the reputation of Doe in the neighborhood 
because it implies Doc was involved in criminal conduct. 

L ft. 5.6.4, 11.5 (U) EXAMPLE 5 

( U/VFOUO) During a Type 5 Assessment, an agent calls a foreign student and tells the 
student she would Like to discuss information contained on his visa. In fact, there is 
nothing about the student's visa of interest to the FBI; the agent's true purpose is to meet 
the student to assess hint as a potential source. May the agent use that false statement of 
purpose in order to induce the student to meet and be interviewed? 

(U/TGUO) Answer : Yes, the false purpose is permissible because it does not imply that 
legal consequences may follow if the student declines to speak to the agent. It would, 
however, not be permissible for the agent to tell the student that he has a serious visa 
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problem arid could face deportation if he does not agree to meet with the agent, because 
that false purpose implies that adverse legal consequence w?ih flow to the student if he 
declines to speak to the agent. 

1 £.5*6*4. 11+6 (U) Example 6 

(U//FOUO) The Joint Terrorism Task Force (JTTF) receives a Guardian lead stating that 
an employee of the East Side convenience store is a terrorist and that he has gone to 
Pakistan for terrorist training. The Guardian lead does not identify the alleged terrorist 
other than stating he works at the store. To resolve the lead, the agent first wants to 
determine who works at the store to see if the FBI has any intelligence that confirms or 
negates the lead- The agent conducts public records searches for the business. These arc 
of limited value as they only provide the name of the owner of the business. Because the 
business is open 24 hours a day, there must be at least one additional employee. In order 
to resolve this possible threat quickly, the agent and a local police detective assigned to 
the JTTF obtain a photograph of a particularly disreputable looking task force officer to 
use in a ruse to determine who works at the business and whether anyone who works 
there has gone to Pakistan. The task force officer and the agent go to the business. The 
police officer identifies himself as a detective with the local police department and says 
Lhat the agent is his partner. Fie explains to the man at the counter I hat there have been 
several robberies oflucaJ convenience stores of late (true on any given day) and that he 
would like the employee to look at the picture to see if he recognizes the person it 
depicts. The employee does not. Then, the task force officer asks for the name of other 
employees ostensibly so that he can also show them the picture. Can the agent proceed in 
this manner? 

(U.VFOUO) Answer : Yes. this a limited interaction with a third party who is not a subject 
or a person of interest and the agent is tacitly allowing himself to be held out as an 
associate of another law enforcement officer. 

18.5.6.4.1 1.7 (U) Example 7 

(U/.-'KGUG) An FBI agent accompanies a DHS Immigration and Customs Enforcement 
(ICE) agent task force member to check out an individual who has been detained incident 
to the individual's arrival into the United Slates at a border crossing. The individual is not 
known to be a subject in any ongoing investigation but acted in an unusual manner when 
asked at the border crossing about his country of origin, For operational reasons, the FBI 
agent does not wish to be identified as an F BI agent but instead wail be introduced as the 
ICE agent's partner, falsely implying that she is also an ICE agent. May the FBI agent 
proceed to the immigration interview and allow ihe ICE agent to suggest that the FBI 
agent is an ICL agent? 

(U/'TOUO) Answer: Yes, the agent can tacitly represent herself to be associated with 
another law enforcement agency and may be present during the ICE interview. The agent 
may not, however, conduct the interview because doing so in a false affiliation capacity 
would be considered an ‘“undercover activity." 
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18.5*6*4*1 1*8 (U) Example 8 

(U//FQU0) Continuing with these facts, shortly after arrival* during the visit an 
opportunity arises for an interview regarding smuggling of' counterfeit cigarettes. The FBI 
agent is asked for her identification by the interviewee. May the agent respond by stating 
she is an ICE agent or by producing a false credential identifying her as such'.' 

(U//FQUO) Answer: No, because this will be an interview that seeks intelligence or 
evidence. During an Assessment, the agent may not conduct an interview under an 
assumed identity as an ICE agent. She must either leave the interview or correctly 
identify herself as an FBI agent. 

18.5*6.4*1 J .9 (D) Example 9 

(U//FOUO) As part of an authorized Assessment conducted online, an FBI employee 
visits a public chat forum using an Internet name that does not disclose FBI affiliation. 
The FBI employee engages an individual in discussion about another private forum 
w here identity theft is discussed. This other forum is password protected and requires 
invitation from someone who is already a participant. The individual invites the FBI 
employee to access the forum and provides a password, May the FBI employee pursue 
the discussion in the private dial forum. 

(TJ//FGUO) Answer: Yes. the FBI employee may engage in limited interaction outside 
the public Ibruiti based on an express invitation from someone who has access so long as 
then; are no special rules apparent in releasing the password. Although limited interaction 
in a context like this is permissible, FBI employees must be very careful in such a 
scenario not to engage in undercover activity, which is not permitted during an 
Assessment. 

1 8. 5. 6. 4. 12 { U//FOUO )PtttaicA ted Investiga tions - Requesting I \ forma tion without 
Revealing FBI A ffiua tion or the True Purpose of a Request 

(U//FOUO) In the normal course of an interview, the FBI employee should divulge the 
employee's affiliation with the FBI and the true purpose of the interview. During a Predicated 
Investigation* however, an FBI employee may request information without revealing FBI 
affiliation or disclosing the true purpose of the request provided the false reason would not 
reasonably be expected to violate the rights or damage the reputation of another person or 
have reasonably anticipated legal consequence. 

(LWFOUOl Withholding FBI affiliation may constitute undercover activity, e,g„ when an 
employee uses an assumed identity to obtain intelligence or evidence from a subject or other 
person of interest. Undercover activity must comply with the guidelines contained in DIOG 
Section 1 8.6. 13 and the AGG-UCO. 

18.5.6.4 . 13 (U) Interviews of Juveniles 

(U//FOUO) When determining whether to interview a juvenile (anyone under the age of 
eighteen) who docs noi fall within ihe provisions of the IDA above, c.g., when interviewing a 
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juvenile as a witness or subject prior to arrest* and* if so, determining [he scope and tactics 
that will be used, the FBI employee should consider the age and competency of the juvenile, 
whether the juvenile is emancipated, the juvenile's relationship to the suspecKsL safety 
concerns, the gravity of the offense at issue, any alternative sources of evidence* the 
importance of the information or potential testimony to the investigation, and the juvenile’s 
degree of involvement, if any, with the offense. If the interview is custodial, compliance with 
the provisions of the Juvenile Delinquency Act (JDA) below is necessary. In determining 
whether a juvenile is in custody the test remains an objective test was there □ formal arrest or 
a deprivation of freedom of movement equivalent to an arrest. However, with respect to 
juveniles, if the juvenile's age is known to the interviewer or is objectively apparent, the 
juvenile's age is to be considered in the custody analysis. This ts not to say that age is the 
determining or decisive factor in every ease, but it recognizes that age is to be considered 
given a reasonable adult may view the circumstances surrounding the interview differently 
than a reasonable juvenile. If the juvenile is placed under arrest* the procedure* listed in 

18.5.6.4.14 must be followed. If not under arrest, but based on the objective circumstances 
surrounding the interview, including the juvenile’s age* the juvenile is deemed to be in 
custody, the interviewer should advise the juvenile of their rights us set forth in the ID- 395 
and cease the interview if the juvenile invokes a right. FarentuL consent for a juvenile 
interview should be obtained when feasible under the circumstances qf the investigation. 

A) (LF//FOUO) Special consideration should be given (o child interviews and to interviews of 
juveniles who are of a lender age, maturity, or have a significant developmental disability. To 
the extent appropriate, agents should make use oflocal child protective services touid in 
interviewing a child — especially lor an offense involving sexual exploitation of the child. The 
agents slrould consider seeking approval to video and/or audio record child interviews fo 
address potential allegations that the child was manipulated anti to have an unimpeachable 
record in ease the child’s statement changes, 

B| U//FOUO) Federal statutes and the Attorney General Guidelines on Victim and Witness 
Assistance require federal investigators to utilize sensitive and developments lly appropriate 
practices designed to elicit the most accurate information from child victims and witnesses and 
to reduce unnecessary and additional trauma to these children. An interview should lie 
appropriate for the age and developmental level of the child. It may be advisable in some 
instances for FBI employees to seek assistance with interviewing children - possibly by 
utilizing local child protective services - particularly, when the child Is very young* 
developments I ly disabled, or extremely traumatized. Interviews of child victims and 
witnesses, regardless of the type of crime, should be conducted by personnel properly trained 
in the techniques designed to best elicit accurate information from a child while minimizing 
additional trauma. 

1 8.5. 6.4.14 (U) Interviews of Juveniles A fter Arrest 

(U//FOUQ) Under the Juvenile Delinquency Act (JDA)„ a juvenile is anyone who commits a 
federal crime before his or her eighteenth birthday and who has not yet reached age twenty- 
one (21) before being charged. The provisions of the JDA. IS U.S.C. § 5031 ct scq., apply 
upon arrest. 

A) (U//FGUO) Whenever a juvenile is arrested fora violation of federal law. he/she must be 
immediately advised of his/her legal rights and (he United States Attorney must be notified. 
The juvenile^ parents, guardian or custodian must also be immediately notified of higher 
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arrest as well as his/her rights and die nature of the alleged offense-. After notification has been 
made, FBI employees mas! allow a parent, guardian, or custodian access (u (he juvenile il‘ 
requested by the juvenile or by a parent, guardian or Custodian of the juvenile. The juvenile 
must be promptly taken before a magistrate if a magistrate is available. If no magi si rate is 
immediately available, the juvenile must be lakcn to a nuigislrate without undue delay, 

B) (U//FOUQ) Whether a juvenile may be interviewed for a confession or admission of his own 
guilt between [he time of his annerst fora federal offense and his initial appearance before the 
magistrate depends on the law of the circuit in which the arrest occurs. If the interrogation is 
not allowed under the law of the circuit, information volunteered by the arrested juvenile 
concerning his own guilt should be recorded in the FBI employee's notes for use in subsequent 
proceedings; clarifying questions may be asked as necessary to make certain the FBI 
employee correctly understands what the juvenile intends to say. The volunteered statement 
may be reduced to writing if such action dews not involve any delay in the juvenile's 
appearance Ik fore the magistrate, Any questions concerning die law that applies in the 
particular circuit should be di reeled to the CDC. 

C) {U//FOUO} A juvenile may be questioned concerning the guilt of a third party if such 
questioning does not cause any delay in bringing him/her before the magistrate. 

D) (U//FOUO) These special requirements apply only after the arrest of a juvenile, as delined by 
federal law, fore federal offense. They do not apply when the juvenile is under arrest by state 
or local officers on a state or local charge but is suspected of having committed a federal 
offense. FBI employees may question a juvenile in custody on a nun-federal charge about a 
federal offense for which he/she is a suspect, FBI employees are cautioned, however, that they 
may noL collude or create the appearance of collusion with nan-federal officers to delay an 
arresi on federal charges lo circumvent the IDA requirements. 

E) ( U/FOUO) A juvenile may waive his Fifth Amendment rights and consent lo a post-arrest 
custodial interview if permitled by (he law of the circuit. Whether a waiver is knowing and 
voluntary will be determined based on the totality of the circumstance* surrounding the 
interview. Among the factors the court will likely consider arc the juvenile’s age. experience, 
education, background, and intelligence, and whether her'she \m the capacity to understand the 
warnings given, the nature of Fifth Amendment rights, and the consequences of waiving them. 
The presence and co-signature of a pareni or guardian during the waiver of rights (FD-39S) is 
not required for a voluntary waiver although it is a factor to be considered and might help 
dispel any notion that the juvenile was coerced. The ALISA must approve a post-anesl 
custodial interview of a juvenile. 

1 ft S. 6.4. IS (U) Document a tion 

(U//FOUQ) When it is anticipated that the results, of an interview may become [he subject of 
court testimony, the interview must be recorded on an FIT-302 or FD-1023 (for debriefing of 
CHSs). The FD-302 or FD-1023 must contain a record of statements made by the interviewee. 
Analysis or contextual comments regarding an interviewee's statements should be 
documented in a companion EC or other appropriate format. If the interviewee characterizes 
an individual, group, or activity in a certain way, FBI records (i e. t 302s. ECs, LHMs) should 
reflect that the interviewee, not the FBI, is the source of the characterization. 

(U//FOUO) Certain types of written materia] developed during the course of an interview 
must be retained including; 
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A) (U//FOUO) Written statements signed by the witness. When possible, written statements 
should betaken in all investigations in win oh a confession off admission of guilt is obtained 
unless the confession is obtained during an electronically -recorded interview session. If a 
witness gives a signed statement, and then gives additional information orally, both the signed 
statement and the oral information should be recorded on an FD-302 or RD-1023; 

8) (U//FOUO) Written statements, unsigned by the witness, but approved or adopted in any 
manner by the witness. An example of such a written statement would be a written statement 
l hat the subject orally admits is true but will not sign; and 

C) t U//FOUO) Original notes of an interview when the result* may become the subject of court 
testimony. Materials generated via email, text messages, or similar means during an online 
interview must be retained as original notes. Because some forms of synchronous 
communication tools, such as text messaging, have limited or no storage, print, or production 
capabilities, they should not be used For Substantive communications with law enforcement 
colleagues or civilians who may become witnesses. If these tools are, nonetheless, used for 
substantive cum mu nidations as pari uf an interview, the eummunicstiuns must he 
memorialized verbatim in an HMNZ. 

D} (U/i'TOUQl If an FBI employee and an AUSA conduct an interview, and the AUSA asks or 
tells the FHI employee to refrain from recording the substance of the interview or taking notes, 
the FBI employee should decline to participate in the interview and should not be present 
when it takes place unless the interview is part of the trial preparation of the witness (or unless 
another law enforcement agent present is given the responsibility for taking notes and 
documenting the substance of the interview!- FBI employees generally do not report the 
substance of trial preparation unless new material information or impeachment information is 
developed. FBI employees should consult with the trial AUSA to determine how to document 
any new information, including impcaching information, developed during the trial 
preparation interviews. 

I ft 5 , 6.4. 1 6 (U) Electronic Recording or Inter views 

(U//FOUO) Special Agents must obtain AS AC approval (which may not he delegated) prior 
to recording: interviews. The requirement to obtain approval is not intended to discourage 
recording or to indicate that the FBI disfavors recording. Indeed, there are many 
circumstances in which audio or video recording of an interview may be prudent. Approval to 
electronically record an interview must be documented on a FD*759, When recording a 
custodial interview, the recording should include an advice and waiver of Miranda rights, as 
well as a question and answer segment designed to demonstrate that the interviewee's 
statements are voluntary and not the product of coercion. 

(U//FOUQ) After completing the recorded interview, the agent must document the fact that 
the interview took place in an FD-302, noting the Identity of the individual recorded and the 
details of the recording session (e.g., date. time, start and stop periods, reasons for stopping! 
FBI employees may include a summary of the recording in the ID-302 if doing so will aid 
them in the management of the investigation. Transcription of the recording is optional. 

(U//FOUO) Establishing within a field office reasonable standards for the types of 
investigations* crimes, circumstances, and subjects for which recording may be desirable w ii 
help maintain internal consistency. The following factors will assist the A&AC in determining 
whether to approve a request to record interview or interviews. These factors should not be 
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viewed as a checklist; they are not intended to limit the discretion of the approving official 
and are not intended to suggest that there is a presumption against recording. 

A) (IV/FOUO) Whether the purpose of the interview is to gather evidence for prosecution, or 
intelligence for analysis, or both; 

B ( (U/FOUG) If prosecution is amici paied, the type and seriousness of the crime, including, in 
particular, whether the crime lias a menial element (such as knowledge or intent to defraud}, 
proof of which would be considerably aided by the defendant's admissions in his own words; 

C) (U//FQUO) Whether (he defendant’s own words and appearance (in video recordings) would 
help rebut any doubt about the voluntariness of his confession raised by bis age. mental state, 
educational level* or undcrsltmding or the English language; or is Otherwise expected to be an 
issue at trial, such as to rebut an insanity defense; or may be of value to behavioral analysts; 

D) (U//FQUQ) If investigators anticipate that the subject might be untnilhtul during an interview, 
whether a recording of the false siatemcnt would enhance the likelihood of charging and 
convicting the person for making a false statement; 

E} (U//FOUO) The sufficiency of other available evidence to prove l he charge beyond a 
reasonable doubi; 

F) (LlA'FOUQ) The preference of the USAQ and the Federal District Court regarding recorded 
confessions; 

C) (IWFOUO) Local laws and practiec-pfirticularly in task force investigations where state 
prosecution is possible; 

H) (LV/FOUO) WhcLhcr interviews with other subjects in the same or related investigations have 
been electronically recorded; and 

I) (U//FOUO) The potential to use the subject as a cooperating witness and (he value of using his 
own words to elicit his cooperation. 

1 8. 5. 6. 4.17 (U) INTERVIE WS J?FM Tim TO CLOSED FILES 

(U/.'TOUO) An interview initiated by an employee should only be conducted if it is within the 
scope of an open authorized Assessment or Predicated Investigation. On the other hand, there 
are situations in which an individual contacts the FBI to report information concerning a 
matter that has been closed or placed in a zero tile classification, or is unrelated to any current 
nr previous investigation, In these situations, an FBI employee may collect whatever 
information the person is willing to provide, except solely First Amendment information, and 
may document the results of the contact in an FD-71 /Guardian, or with an FX or FD-302 
These documents may be uploaded in files that are relevant to an open Assessment or 
Predicated investigation, a closed Assessment or Predicated Invesiigation, a zero 
classification tile, or a control file (ifno further investigative activity 1 is required), 

1 8. 5. 6. 4.18 ( U) FBI HQ Optra tiona l Division Requirements 


AHU//FOUG) Cimn i arinieflivem e Diviskm : Interviews conducted during counterintelligence 
Assessments and Predicated Investigations must comply with the requirements contained in 
the Memorandum of Undemanding between the Department of State ami the FBI on Liaison 
far Counterintelligence Investigations. The FBJF1Q Counterintelligence Division PG contains 
interview approval requirements. 
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(U.VFOUO) Other FBiHQ Divisions : Each RHINO division may provide additional interview 
notice requirements in hs PG, 

1 8.5,6 .5 [U] Use/D tss em I nation 

(U//FOUO) The use or dissemination of information obtained by this method must comply 
with the AGG-Dom and DIOG Section 14. 
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18 . 5 . 7 (U) In vestiga jive Method : / n forma tion Vol untaril y Pro video b y 

Governmental or Priva te Entities 

(U) See AGG-Dom, Pan fLA.4,g. 

18.5.7.1 fUJ Scope 

CLV.-'FOUOj An FBI employee may accept information voluntarily provided by federal, state, 
local, tribal, or foreign governmental or private entities and individuals. Voluntarily provided 
information includes, but is not limited to, oral as well as documentary and physical evidence 
such as a computer hard drive or other electronic media that contains information, paper 
documents containing in formation, or physical objects (e.g., handgun or narcotics). 

(U//FOUOI Nothing in this section prohibits asking for or accepting volunteered access to 
personal or real property. 

(Lv.FGUG) Sole: Consent Searches are authorized in Assessments, as well as Predicated 
Investigations. 

(U//FOUD) Nats: If the originator of information reported to the FBI characterizes an 
individual, group, or activity in a certain way, and that characterization should be documented 
for completeness of the FBI record, the FBI record (i.e., 302, EC, LFIMJ should reflect that 
another party „ and not the FBI, is the originator of the characterization. 

18.5.7.2 (U) Application 

(U'/FOUG) This investigative method may be used prior to opening an Assessment, in 
Assessments, Predicated Investigations, foreign intelligence collection investigations, and for 
assistance to other agencies when it is not otherwise prohibited by AGG-Dom, Pant UI.B.2-3. 

18*5,7,3 (U)AppHfJVAt, 

IU//FQUO) Supervisory approval is not required to accept voluntarily provided information. 
Personnel may not request nor knowingly accept information where disclosure would be 
prohibited by federal law. See, e,g„ IS U.S-C, § 2702 (prohibiting an entity providing 
electronic communications services from divulging certain communications and other 
Mn.dv except in certain circumstances), 

1 y. 17.4 fU) Use/ Dissemination 

1 < ?L O) The use or dissemination of information obtained by this method must comply 
1 he AGG-Dom and DIOG Section 14. 
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l 8 5M (U) iNVESTIGA TiVE METHOD: PHYSICAL SURVEILLANCE (NO T REQ UIRINC A 
COURT ORDER) 

(U) See AGG-Dom. Part 1 1. A Ah - '"Engage in observation or surveillance not requiting a court 
order," Note: Consent Searches are authorized in Assessments, 

(U) For additional information regarding physical surveillance during Assessments or predicated 
national security investigations* see DlOti Appendix G Classified Provisions. 

18,5.8.1 (U) Scope 

(U//FOUO) Physical Surveijlaitce Defined : Physical surveillance is the deliberate 
observation of persons, places, or events, on cither a limited or continuous basis, in areas 
where there is no reasonable expectation of privacy, 

( LV/FQUO) Distinction betw een Casual Qbservalwn and Physical Surveillance : A 
bright line cannot be drawn between "casual observation" and "physical surveillance." 
The distinction is necessarily determined by the facts and circumstances at hand. "Casual 
observation" should be short in duration and narrow in scope. 

(U//FQUQ) The following factors should be considered when determining whether a 
particular plan of action constitutes "casual observation," for w r hich there is no approval 
requirement, or "physical surveillance," tor which there may be approval requirements (see 
DICK] Section I H AS .2 below): 

A) (LWFOUO) The duration and frequency of Hie observation of a. particular person or location. 
The longer or more frequent it is, the more likely it is physical surveillance; 

B) (U//FOUO) The location ufyuur observation point. A covert observation point is mure likely 
to be viewed as physical surve II lance; 

C) {U//FOUO) Whether the observation is done from a stationary position or a moving position* 
and, whether the purpose of moving is limited to obtaining a license plate number or other 
identifying infonnation. Moving for purposes of following the person to ascertain where he or 
she is going is more likely to be physical surveillance, and 

D) {Li/vFOUOl Whether the observation is being done with the unaided eye. Aided observation 
by telephoto lenses or binoculars, particularly for an extended period, is more likely to be 
physical surveillance. 

i [ ¥ QUO) Surveillance Enhancement Devices : The use of mechanical devices operated by 
the user (e.g., binoculars; hand-held cameras; remotely operated, continuously monitored 
cameras; radiation, chemical or biological detectors) is authorized as part of physical 
surveillance provided that the device is not used lt> collect information in which a person has a 
reasonable expectation of privacy (e.g.. equipment such as a parabolic microphone or other 
listening device that would intercept a private conversation or thermal imaging a home is not 
permitted). CCTV Video Surveillance as defined in DIOG Section 1H.6.3.3.A is not 
authorized for use during an Assessment (e,g., a pole camera cannot be used during an 
Assessment if il is not continuously monitored, even if it is set to survei! an area in which 
there is no reasonable expectation of privacy). 
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18.5.8.2 [U) Application 

(U.vFOUO) This investigative method may be used in Assessments, Predicated Investigations, 
foreign intelligence collection investigations, and for assistance to other agencies when it is 
not otherwise prohibited by AGG-Dom, Part II LB. 2 -j. 

18.5.8.3 (U) Approval 

(L7/FOUO) During an Assessment, physical surveillance may be approved fora period of 
lime not to exceed 12 hours as explained further below. 

1 B. 5. 8. 3. 1 (U//FOUO } Standards fun Opening oh A PPRQVtNG Pn vsical Surveillance 

During an Assessment 

(L7/FOUO) During an Assessment, in addition to the standards contained in DIOG Sections 
5.5 and 5.8, the FBI employee and supervisor must consider the following: 

A) ( LJ/.'F'O UO) Whether die physical surveillance is rationally related to the articulated purpose 
and objective of the Assessment; 

0} (LF/FOUO) Whether the physical surveillance is (he least intrusive aliemative lor acquiring 
needed information; 

C) (U//FOUO) If the physical surveillance is for the purpose of determining a pattern oi'aeliviiy. 
whether there is a logical nexus between the purpose of the Assessment and the pattern of 
activity the employee is seeking to determine: and 

D) (U//FUUO) If tie tng conducted in order lo gather positive Idreign intelligence, whether die 
surveillance is eonsistenl with the requirement that the FBI employee operate openly and 
consensually with a LISPER, to the extent practicable. 

I a a a 3.2 ( U//FOVO ) 72-Hour Period for Assessments 

(U//FOUO) In an Assessment, an FBI employee must use the FD-7 1 or Guard inn (for Type I 
& 2 Assessment activities) or an EC (for Type 3, 4. and 6 Assessment activities) to request 
SSA orSIA approval prior to conducting physical surveillance. If exigent circumstances an sc. 
the FBI employee can conduct physical surveillance without prior approval buL must within 
24-hours complete an FD-71 „ Guardian, or EC seeking supervisor approval for the 
surveillance. 

(U//FOUO) In the appropriate system (FD-71 or Guardian), the reason and objective of the 
physical surveillance must be documented, and the approved 72 -hour period of surveillance 
must begin as stated in the plan at the opening of surveillance. During the 72-hour period, 
there is no limitation on the use of continuous fixed or moving physical surveillance so long 
as the activities are consistent with the reason approved by the SSA or SI A. The SS A or SI A 
may approve physical surveillance requests in incremental periods no longer than 72-hours 
each. The employee cannot submit one request for multiple 72- hour periods of physical 
surveillance to the supervisor. For example, if supervisory approval is acquired for a 
documented plan which specifies that a surveillance will begin at 8: OB a.m. on Monday, 
September 1 5, 2008, the 72-hour period of surveillance will expire at 8:00 a.m. on Thursday. 
September 1 8, 2008. At or near the end of a 72- hour period of time, if the employee 
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determines that additional physical surveillance is required, the employee may request 
supervisor authorization to conduct subsequent physical surveillance for an additional period 
of no more than 72 hours each. Alt supervisory approvals, if required,, and the results of 
physical surveillance must be documented in the appropriate Assessment or Predicated 
Investigation file after review by the supervisor, 

1 8.5.8-3-3 (U//FO UO) MOBILE Sun VEILLA NCE TEAM (MST) OR MOBILE SURVEILLANCE TEAM 

-Armed (MST A) 

(U//FOUO) An employee may request the use of an MST or MST- A during an Assessment or 
Predicated Investigation by documenting the purpose and objective in an FD-71, Guardian, an 
EC, or other appropriate form requesting Assistant Special Agent in Charge (AS AC) 
approval. 

(U//FQUQ) MSTs and MST- As are overseen and managed by the Mobile Surveillance Unit 
(MSU) at FHIFIQ. For additional information on MST resources refer to the CIRG PG. 

1 8.3 8.3.4 (U) A via tion Resources 

(U//FGUO) An FBI employee may request the use yf aviation resources, ty include Forward- 
looking Infrared (FLIR) devices mounted in fixed-wing and rotary-wing aircraft, during an 
Assessment or Predicated Investigation by dtjcumenting the reason and objective in an FD-71, 
Guardian, an EC, or Other appropriate form requesting AS AC approval. 

1B.5.U.J.4, 1 (U//FOLO) FuftWARD-LOtHONC INFRARED ( KLI R) CAMERAS 

(U//FQUQ) Thermal imaging, sometimes called FLIR, cameras may be operated as hand- 
held devices or mounted in fixed- and rotary-wing aircraft. Tnfrared cameras produce 
images of invisible infrared or "heat" radiation. FLIR is used to assist in visual 
surveillance during various operational scenarios, including perimeter surveillance, 
search and rescue operations, vehicle pursuits, and to locate fugitives or otherwise to 
track objects yr subjects in open areas or within the curtilage of a dwelling that cannot 
easily be observed on the ground without defection, 

1 8. 5.8.3. 4 . /. 1 (U//FOUO) A wcRAfT-MOi wted Video or FUR 

(U//FOUO) Typically, aerial FLIR is deployed to supplement ground- based physical 
surveillance to enhance the safety of the mission or when surveillance teams arc unable to 
maintain close-in surveillance because of the risk of detection. The use of thermal 
imaging, especially during nighuime hours, can alert officers to potential dangers, such as 
an ambush or suspects hiding in bushes or other perimeter areas. If FLIR is being used 
for surveillance outside of the home — in open fields, forests, highways, and possibly, the 
area surrounding a home, know n as the curtilage — a search warrant is not required 
because those areas do not enjoy Fourth Amendment protection from aircraft-mounted 
surveillance. If FLIR is being used to obtain information regarding the interior of the 
home that is otherwise unknowable without physical intrusion, it likely constitutes a 
search subject to the requirements of the Fourth Amendment. 
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(UATOUO) Example of a me of FUR that requires a search warrant, if used to detect 
heat emanating from within a home to make inferences about the use of high-powered 
marijuana-growing lamps inside the home f KvIlo v- United States, 533 U,S. 27 (20Q1 )), 

( U.'VFOL'Q) If a aircrafi-tnouriled KLIR device is lo be used: 

I ) (Ui'/FOUO) Tlie aircraft must be in public airspace and comply with Federal Aviation 
Administration (FAAt regulations regarding altitude: 

2 1 (U. '-FOLIO) Overnights of private residential tieigbborhood-s should be avoided if 
operationally feasible: 

3) (U/-FOUO) To the cadent heal signatures may he incidentally collected from homes (not 
the curtilage), no affirmative investigative use may be made of such information, unless 
exigent circumstances or other authorization permits its use: and 

4) ( U/d'QUQ) FLIR surveillance designed to capture and qualitatively analyze the heat 
signature of a private residence cannot be authorized without a properly issued search 
warrant fur applicable exception). 

fLV/FOUO) f DC review must be obtained for aircraft-mounted FLIR when the use 
exceeds the specific DKXi restrict ions as sel forth in Section IS. 5. 8. 2.4. 1. 1 .2 above. In 
such investigations, CDC review is needed to determine whether additional legal 
requirements apply to the use of aircraft-mounted FLIR equipment (i.e.. a court order). 
Such additional review must be documented in an EC requesting approval for the 
exceptional use of aircraft-mounted FLJR; such use may not be authorized in an 
Assessment. 


1 £>533.4*2 (U//FOCO) aviation Video Surveillance 

(U//FOUO) The following guidelines govern the use of video equipment that is 
permanently mounted Lo an aircraft and to the operation of FLJR equipment when there 
no intrusion into areas in which a person has a reasonable expectation of privacy. Such 
recordings must be maintained in the investigative electronic Surveillance ( EL SDR) 
subtile. The following procedures must be followed: 

A) (U/'' FOLIO) Each lltghc must use new recording media. The recording must begin when the 
sensor is deployed. It may not be stopped and restarted, and the entire investigative mission 
must be recorded: 

B) (UA'FOUO) Esteh recording media must be labeled wiih the following information: FBI file 
number, dale, operator name and initials, time on and limeotY: and 

C) (U.'VFOUOl Each recording media must be treated as an original For those aircraft lhal have 
the capability in create two recordings simultaneously, both must he treated as originals. 

1 8.5.8.3.43 (U/fFOUO) Compliance and Muni i okinc 

(U.'v'FOL'O) Authorization drjeuments regarding the use of FLIR and aviation video 
surveillance must be documented in the investigative LLSUR Jlle,. 
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18.5.8-4 (U) Other Physical Surveillance 

{U//FOUO| Physical surveillance conducted by employees, other than through use of the 
resources discussed above (Le., MSTs. MST-As and aviation), during a Predicated 
investigation does not require supervisory approval In addition, the 72 hour lime limitation 
on the use of MST or MST-A is not applicable during Predicated Investigations. 

18.5.8.5 (U) Maintain a "Surveillance Loo" during Physical Surveillance 

(U/.TOUO) A surveillance log must generally be maintained tor the purpose of documenting 
observations made during the period of physical surveillance. The tog js a chronological 
narrative detailing the observations noted during the survei llanee. A team member must be 
assigned to maintaining the surveillance log. At the end of the shill, each individual must 
initial on the survcil lance log the notations of the activities he or she observed. Completed 
surveillance logs must he incorporated into the investigative file. Any original notes must be 
permanently retained in a I A envelope (FD-340a) in the investigative file. Surveillance logs 
must be concise and factual. When reporting locations, the surveillance log must be as 
specific as possible. Surveillance team members mast avoid over-reporting and including 
unnecessary information; logs arc subject to discovery in legal proceedings. 

18.5.8.6 (U) Use/Dissemination 

(U//FQUO) The use or dissemination of information obtained by this method must comply 
with the AGG-Dom and DTOG Section 14 
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1 S. 5. 9 (U) Investlga tive Method: C*ra nd Jur y Subpoenas - for telephone or 

ELECTRONIC MALL SUBSCRIBER (N FORMA TiON ONLY (IN TYPE 1&2 

Assessments) 

(U)Sue AtiCi-Dom, Fart II. A.4. i. 

(U) See DIOG Section I 8.6.5 for additional information on use of Federal Grand Jury (HJJ) 
subpoenas ira Predicated Investigations. 

1B.S.9.1 (U) Scope 

(U//FOUO) During a Type I & 2 Assessment, an FBI employee may request from an 
appropriate U5AO the issuance of a FGJ subpoena for the limited purpose of obtaining 
subscriber information associated with a telephone number or e-mail address. A FGJ 
subpoena, under this provision, may not be requested for the purpose ofeollecting foreign 
intelligence. For more information regarding FGJ subpoenas, see DIOG Section I 8.6,5. 

IS.5.9,2 {U) Application 

(U//FQUO) This investigative method may be used only in Type I & 2 Assessments. It may 
not be used in a Type X 4, 5, or 6 Assessment. 

1B.S.9.3 (U) Approval 

(U//F0UO) In Type l & 2 Assessments, telephone and electronic mail subscriber information 
may be requested through the use of an FGJ subpoena without supervisory approval. An agent 
requesting a grand jury subpoena during an Assessment must advise the AUSA, who xvill 
issue the subpoena, that the FBI is conducting an Assessment. The AUSA must determine 
whether there is sufficient connection between the Assessment and possible criminal conduct 
to warrant issuance of a FGJ subpoena, FGJ subpoenas may not be sought during a Type 3,4. 
5, or 6 Assessment. 

18.S.9.4 (U) Electronic Communications Privacy Act (E CPA J (18 U.S.C.£§27(H- 

2712} 

(U//FOUO) IS L.S.C, £ 2703(c)(2) states that nl a provider of electronic communication 
service or remote computing service shall disclose to a governmental entity the: (i) name: (ii) 
address; (iii) local and long distance telephone connection records, or records of sessions, 
times and durations; (.tv) length of service (including start date) and types of service utilized; 
tv) telephone or instrument number or other subscriber number or identity, including any 
temporarily assigned network address; and (vi) means and source of payment for such service 
(including any credit card or bank account number), of a subscriber to or customer of such 
service when the governmental entity uses a Federal Grand Jury subpoena," I towever, in 
Type l & 2 Assessments only subscriber information may be obtained through the issuance of 
a FGJ subpoena, other customer information described above can only be obtained in a 
Predicated Investigation, See DIOG Sections 18,6,4 18,6.8. 
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18,5*9*5 (U> Use/Dissemination 

{U//FOUO) Because judicial districts vary as to whether subscriber records obtained through 
use of a FGJ subpoena must be handled pursuant to the FGJ secrecy rules as "matters before 
the grand jury,” subscriber records obtained pursuant to a FGJ subpoena should be protected 
as required by the judicial district (e.g., USAO) in which the FGJ subpoena is issued. In 
addition, in those judicial districts in which subscriber records obtained pursuant to a FGJ 
subpoena are considered to be '"matters before the grand jury,” no documentation of the actual 
subscriber records should be made in the FD-71 or Guardian. Instead, a copy of the FGJ 
subpoena and the responsive subscriber records must be tiled in a I A, I EL or 1C and uploaded 
to the GJ subfile. Due to developing law on this issue, employees should consult with the 
A US A to determine whether such documents are considered to be FGJ materials and must 
handle them accordingly. The use or dissemination of information obtained by this method 
must comply with the AGG-Dom, DIOG Section 14, and the Federal Rules of Criminal 
Procedure (FRPQ Rule 6, 
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18.6 IU} Authorized Investigative Methods in Preliminary Investigations 


(U) See AGO- Dorn, Part li.B and Part V.AI-10. 

(U) In Preliminary Investigations the authorized methods include the Following: 


A) (U) The investigative methods authorized for Assessments: 
t ) (U ) Public information. (See Section 18,5.1 1 
2) (U) Records or information - FBI and DOJ (See Section 18.5.21 

5) (U > Records or information - Other federal, slate, local, tribal, or foreign government 
agency. (See Section 18.53) 

4) (U) On-line services and resources. (See Section 18.5.41 

5) (U) CHS use and recruitment. (See Section 18.5.51 

6) (U) Interview or request information from the public or private entities. (See Section 
18.5.61 

7) (U) Information voluntarily provided by governmental or private entities. (See Section 


8) (U) Physical Surveillance (not requiring a court order). (See Section 18.5,81 

B) (U) Consensual monitoring of communications., including electronic communications. (See 
Section 18.6.11 

C) (UJ Intercepting the communications of a computer trespasser. (See Section 1 8.6.2 I 

D) (D) Closed-circuit television/video surveillance, direction finders, and other monitoring 
devices. (See Section 1 8.63) 

E) (Ul Administrative subpoenas, (See Section 1 8.6.4) 

F) (IP) Grand jury subpoenas. (See SccLton 18.6,51 

G) (U) National Security Letters. (See Section 1 8 -6-6) 

H) (U) FISA Order for business records. (See Section IS.6.7) 

I) (U) Stored wire and electronic communications and transactional records. (See Section 
18,6,8)'* 

J} (U) Pen registers and Lraprtrace devices. (See Section 18,6.9) 

K) (U) Mail covers. (See Section 18.6,10) 

L) <0) Polygraph examinations. (See Section 18.6.1 1) 

M) (U) Trash Covers (Searches that do not require a warrant or court order). (See Section 18.6.12) 

N) (U) Undercover operations, (See Section 18,6,13) 


16 (U//F0UD) The use of Search Warrants to obtain this Information In Preliminary Investigations is 
prohibited, (See DIGC Section 18.6.8.4.2.3) 
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18.6.1 (U) IN VEST1GA TtVE METHOD: CONSENSUAL MONITORING OF 

COMMUNTCA TIONS, INCLUDING ELECTRONIC COM MONICA TIONS 

10.6.1.1 [U) SUMMARY 

(U) Monitoring of wire, oral or electronic communications based on the consent of one party 
to the communication is referred to as consensual monitoring. The consent exception applies 
to the interception of wire; oral, and electronic communications. Consensual monitoring 
requires review by the CDC (Office of Origin — Field Office) or the OGC (Office of Origin - 
FBIHQ}. (AGG-Dom, Part V.A.4) 

18.6.1.2 ( U ) Application 

(LWFOUG) This investigative method may be used in Predicated Investigations, positive 
foreign intelligence collection investigations, and for assistance to other agencies when it is 
not otherwise prohibited by AG G-Dom. Part III.B.2-3 or law. This method cannot be used 
during an Assessment, 

(UftFGUO) For those state, local and tribal governments that require all-party consent and do 
not sanction or provide a law enforcement exception for one-parly consent recording of 
communications with persons within their jurisdiction, OIA approval by an SAC is required. 
This approval authority is delegable to an ASAC or SSA. The SAC of the employee who is 
seeking to conduct the consensual monitoring is the approving official for this OIA. Prior to 
the SAC authorizing the OIA, one party consent must be acquired. 

(UtfFOUO) The law of the state or territory where the consenting party is located when 
making the recording will govern whether OIA approval is needed. 

(U//FGUQ) See the OGC website for a list of all-party consent states. See also DIOG Section 
18. 6. 1.6, below. 

18.6.1.3 (U) Legal AUTHORITY 

A) (U) The Fourth Amendment to the United States Constitution and case law interpreting the 
same; 

B> (U) The Wiretap Statute, 18 U.S.C. § 251 1-2522 „ prohibits the intentional interception and 
use of wire. Voice, or electronic communications absent an exception; 

C) |U) The Consensual monitoring exceptions. I 8 U.S.C. § 251 1 (2)(c) & (d), require one party to 
the communication to Consent to monitoring; and 

D) (U)The Foreign Intelligence Surveillance Act of 1978 (FISA), 50 U.S.C. §§■ 1801 elseq. 
provides that if a party to the communication has consented to monitoring, a FISA Court order 
is not required. 

18.6.1.4 [U) Definition of Investigative Method 

(U) Generally, the Wiretap Statute (also referred to as Title III), 18 U.S.C. §§ 2510-2522, 
prohibits the intentional interception of wire, oral, or electronic communications unless one of 
several exceptions applies. One such exception is based on the consent of a party to the 
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communication. Two other statutory exceptions to the general prohibition include I ) the 
warrant or court order exception, and 2) the computer trespasser exception. This section 
discusses the monitoring of communications under the consent exception. 

< U) Consensual monitoring is the monitoring of communications based on the consent of a 
parly to the communication. ( AGG-Dom, Part VILA.) For purposes of this policy, at least one 
of the parties to the communication must be located, or the interception of the consensual 
communication must occur, within the United States or the United States territories. The 
consensual monitoring of communications is subject to legal review by the C DC or OGC, as 
applicable, (AGG-Dom, Part Vj\ 4) Consensual monitoring includes the interception of the 
content of communications and typically falls into one of three general categories: 

A) (U) Wire communications, which include conventional telephone communications or other 
means of transmitting the human voice through cable, wire, radio frequency (RF), voice over 
Internet Protocol (VoIP), or other similar connections: 

B) (U) Oral communications , typically intercepted through the use of devices that monitor and 
record oral conversations (e.g.. a body transmitter or recorder ora fixed location transmitter or 
recorder used during face-to-face communications in which a person would have a reasonable 
expectation of privacy but For the consent of the other party): and 

€) (U) Electronic communications , w hich include any transfer of signs, signals, writing, images, 
sounds, data, or intelligence by a wire, radio, electronic, or optical system or network teg., e- 
mail. instant message, chat sessions, text messaging, non-voice peer-to-peer communications), 
as that term is defined in 18 U.S.C. § 2510(12)04) and (3 7), which are intercepted and 
recorded at the time of transmission. The monitoring of electronic communications based on 
one party consent is sometimes referred to as ''consensual computer monitoring." "Consensual 
computer monitoring" applies to “real lime" electronic surveillance based on consent and does 
not include retrieving or obtaining records of communications that have been stored on the 
computer or elsewhere after the communication has occurred. 

(U) .V Die regarding electronic communications moni forma: Agents seeking to 
consensual ly monitor electronic communications (specifically, communications to, 
through, or from a computer) must consider whether the party who has consented is a 
party to all of the communications they want to monitor or whether some of the 
communications involve a computer trespasser, as defined by the computer trespasser 
exception, (See DIGG Section 18.6,2) The trespasser exception and the consensual 
monitoring of communications exceptions are related, but separate, exceptions to the 
Wiretap Statute. The owner, operator, and authorized users of a protected computer or 
computer network can consent to the monitoring of only those communications they send 
or receive (i.e. t to which they are a party), which typically does not include a trespasser's 
communications. The trespasser exception allows the interception of the communications 
transmitted to or from the trespasser. 

(U) When applicable, the exceptions to the Wiretap Statute can be used together, 
permitting the interception ofthe communications of both authorized users and 
trespassers on the protected computer. This is particularly useful when it is difficult to 
discern the trespasser communications from other communications, If it is possible to 
obtain consent to monitor the communications of the authorized users, use of both the 
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consent and trespasser exceptions together can mitigate the risk of over or under 
collection of the trespasser's communications. 

1 8.6. 1,5 f U ) Standards an d A ppro val Reg hi rem ents for Consensual M on itqring 

1 8. 6 , IS. 1 (U) General Appro val Requmements 

(U//FOUQ) Except as provided below, an SSA may approve the consensual monitoring of 
communications if the information likely to be obtained is relevant to an ongoing Predicated 
Investigation. SSA approval* documented through the FD-759* is conditioned on the 
following criteria being met and documented on the FD-759 and other supporting 
documentation: 

18.6.1.5.1.1 (U) REASONS FOR MONITORING 

(U//FOUO) The synopsis must include sufficient factual information supporting the need 
for the monitoring It must provide the relationship between the monitoring and the 
investigative purpose (e g., obtain evidence of drug trafficking, public corruption, etc ). 

1 8.6.1 .5. LI (U) Documented Consent of a Paktv to the Communication to 
re monit ored 

(U//FOUO) Consent must be obtained from one of the parties to be monitored, and the 
consent must be documented to the investigative ELSUR subfile. Having the consent of 
one of the parties provides an exception to the Title III statute. The requirement to obtain 
and document consent also applies to the monitoring of computer communications. See 
DIOG Section 1 8,6,11,7. 3,1 for specific procedures, 

18.6.1.5. 1.3 (U) Subject 

(U//FOUO) Agents conducting consensual monitoring must not Intentionally intercept 
third-parties who are not of interest to the investigation except for unavoidable or 
inadvertent overhears, 

18.6.1 .5. 1.4 (U) Location of device 

(U//FOUO) Consensual moniLOnng can only be approved if appropriate safeguards are in 
place to ensure that the consenting party remains a party to the communication 
throughout the course of monitoring. For example, if a fixed-location monitoring device 
is being used* the consenting party must be admonished and agree to be present during 
the duration of the monitoring. If practicable, technical means must be used to activate 
monitoring only when the consenting party is present. 

18.6.1. 5. 1.5 (D) Notice of Consensual monitoring to other field Offices 

(U7/FOUO) If an employee, CHS, ornon-confidential third party is operationally tasked 
to conduct consensual monitoring outside the field office + s territory, the FBI employee 
requesting approval to conduct the monitoring must provide notice to the SSA who is 
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responsible for the investigative program in the field office where the monitoring will 
occur. This notice must be documented in ike appropriate investigative file. If the actual 
monitoring is conducted at a remote recording facility, no notice is required to be given to 
the field office where the remote recording facility is located. 

(UI/FOUO) For example: A CHS from New Haven is tasked to travel to New York City 
For a meeting that wilt be consensually recorded. The New Haven FBI employee must 
notify the appropriate New York SSA of the consensual monitoring, which will take 
place in NY. If the CHS is tasked to travel to New York where he/she opens a 
consensually monitored telephone call using a remote recording facility to monitor the 
call (.and the remote recording facility is in Richmond) notice must be provided to the 
appropriate SSA in New York, but notice is not required to be given to Richmond. 

18.6,1 .5.1.6 (U) Duration of Approval 

(UV/FGUO) The request for approval must state the length of time needed for monitoring. 
Unless otherwise warranted, approval may be granted for the duration of the 
investigation, subject to a substantial change of circumstances. If one or more sensitive 
monitoring circumstances is present* DOJ may limit its approval to a shorter duration. 

See DIOG Section 18.6.1,6.3 below. 

18.6.1 .5.1.7 [ XJ ] Legal Review 

(U//FGUO) Prior to the opening of consensual monitoring, the CDC orOGC must concur 
that, given the facts of the investigation, the consensual monitoring is legal. Although 
A USA concurrence is no longer required for consensual monitoring, providing notice to 
the AUSA is encouraged. 

1 8.6. 1 .5. 1 .8 ( U ) Chang e qf Monitor! nc Circu m&t a nces 

(UI/FGUO) Whenever the monitoring circumstances change substantially, a new FD-759 
must be executed, and the CDC or OGC must be recontacted to obtain new concurrence. 
(AGG-Dom, Part V.A.4.) The following are examples of substantial changes in 
monitoring circumstances which require a new FD-759: a different consenting party* a 
change in the Location of a fixed monitoring device, or the addition ofa new computer 
system. If any of these or other monitoring circumstances substantially change, the FBI 
employee must immediately contact the CDC orOGC. 

18.6.1.5.1.9 (U) Joint Investigations 

(UI/FGUO) In joint investigations, the policy and procedures for conducting any 
investigative method or investigative activity by employees or CHSs are usually 
governed by FBI policy. Similarly, employees from other agencies who are participating 
in a joint investigation with the FBI are generally governed by their agencies * policies 
regarding approvals, If* however, the FBI has assumed supervision and oversight of 
another agency's employee {e g., a full limeJTTF Task Force Officer), then FBI policy 
regarding investigative methods or investigative activity controls. Similarly, if another 
agency has assumed supervision and oversight ofa FBI employee, unless otherwise 
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delineated by MGU. the other agency's policy regarding investigative methods or 
investigative activity controls. 

(U//FOU0) Consensual monitoring conducted by a non-con tide ntial parly (e.g., witness, 
victim, etc,) will be controlled by the agency that is primarily responsible for the non- 
confidential party. In a joint investigation, the employees should reach an understanding 
as to which agency is responsible for the non-confident ial party; that agency's policies 
will govern approval and documentation requirements for consensual monitoring. 

lfl . 6. 1.6 ( U ) CO N SENSUAL MON ITORI NG SITUATION S REQU1RI NG AD D1TI ONAL APPRO WkL 

18.6.1 .6. 1 (if) Party Located Outside the United States 

(U//FOUG) Some countries are know n to prohibit one-parly consensual recording of persons 
within their country. An employee who is seeking to consensually monitor a person know n to 
be located in such a country must submit an FD-759 with a cover EC to the appropriate 
FBI HQ Section Chief who is responsible for the investigative program for approval. Such a 
request ma> only be approved following consultation with the DQJ, Criminal Division Office 
of International Affairs, and upon a determination by the appropriate FBIHQ Section Chief 
that the benefit of using the technique outw eighs the risks involved. The EC will also include 
a notification copy to the appropriate IOD Section Chief. The IQD may provide to the 
responsible Section Chief any information it deems relevant in considering such a request 
including its view whether the potential benefit of using the investigative method outweighs 
the potential diplomatic risks involved. A list of countries to which this policy applies is 
available in DlOG Appendix G. 

(UVFOUO) If a non-consenting party initiates a communication that is known to originate 
from a country that opposes one-party consents, the communication may be recorded without 
FBIHQ approval but the IOD must be notified as soon as practicable after the communication 
has been concluded. 

(U//FOUO) When engaged in consensual computer monitoring, the location of the non- 
consenting party is often unknown and can easily be masked. The notice and approval 
requirements discussed above do not apply if the location of the party to the communication is 
not known to be in one of those countries. Nevertheless, if the investigation identifies the 
country where a non-consenting parly is located, and that country is one known to oppose 
one-party consent and does not have an exception for law enforcement, the above procedures 
should be followed. 

(U//FOUG) If neither party to the communication is located w ithin the United States, the 
United States territories, or outside the territories of all countries, the DlOG does not govern; 
rather, the AGG for Extraterritorial FBI Operations and Criminal Investigations control for 
criminal investigations or the NSlG portions regarding extraterritorial operations control for 
national security investigations and collection of foreign intelligence. In such investigations, 
consultation with the appropriate Legat and IOD is required. See DlOG Section 13. 
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1 ft 6. 1. 6.2 { U) Consent of More than One Pa rty Required for Consensual Monitorinu 

(U//FOUO) For those state, local and tribal governments that require all-party consent and do 
not sanction or provide a taw enforcement exception for one-parly consent recording of 
communications with persons within their jurisdiction, otherwise illegal activity {OLA} 
approval by an SAC is required. This approval authority is delegable to an AS AC or SSA. 

The SAC of the employee who is seeking to conduct the consensual monitoring is the 
approving official for this 01 A. Prior to the SAC authorizing the OlA, one-parly consent must 
be acquired. 

(U//FOUO) The law of the state or territory where the monitoring w ill take place w ill govern 
whether OlA approval is needed. 

(UtfFOUO) Consensual monitoring authority and OlA in all-party consent states with no law 
enforcement exception for FBI employees and non-eon ftdential parties may be authorized for 
the duration of the investigation, unless specified otherwise, and the authorization must be 
appropriately documented. As noted in DIOG Section 1 7.4 above, OlA authority for a CHS 
must be approved in conformity with the AGG-CHS and the FBI CHSPG. 

LU//FOUO] tHl ttnptuyee and twn^confuienimt purty (OiAj; When OlA consensual 
monitoring will be conducted by an FBI employee or a non-con ftdential party, the OlA 
approval must be obtained from the SAC of the employee who is seeking to conduct the 
consensual monitoring, and the approval must be documented in a properly executed FD-759. 
This approval authority is delegable to an AS AC or SSA. Such OlA may be granted for the 
duration of the investigation, as long as the consensual monitoring circumstances do not 
materially change. 

{ U//FQUQ \ CHS (OIAj : W hen OlA consensual monitoring will be conducted by a CHS, the 
OlA approval must be obtained from the SAC of the field office in which the CHS is handled. 
This approval authority is delegable to an ASAC or SSA. Such OlA approval may be granted 
fora maximum of 90 days, with no additional OlA documentation required for monitoring 
during that period. If it is necessary to extend the OlA for consensual monitoring beyond the 
initial 90 day period, another FD-759 may be used or, alternatively, such OlA for consensual 
monitoring may be requested, approved, and documented with an EC to the CHS file 
consistent with the AGG-CHS and the FBTs CHSPG. The original and all subsequent FD- 
759s used to document the OIA approval for the CHS must be maintained in the CHS file. A 
copy of the FD-759 must also be filed in the investigative file or any ELSUIl subfile as 
appropriate 

{UVVFOUO) See the OGC website for a list of all-party consent stales. See, also DIOG Section 
18.6.2, below. 

18.6.1.6.3 (u) Sensitive Monitoring Circumstance 

{11} Requests to monitor communications when a sensitive monitoring circumstance is 
involved must be approved by Lhe DOJ Criminal Division, or, if the investigation concerns a 
threat to the national security or foreign intelligence collection, by the DOJ NSD. (AGG- 
Dorn, Part V.A.4) A “sensitive monitoring circumstance 1 * is defined in the AGG-Dom, Pari 
VLI.O, to include the following: 
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A) (U) Investigation of a member of Congress, a federal judge, a member of the Executive 
Branch at Executive Level IV or above, or a person who has served in such capacity within 
the previous two years (Executive Levels I through IV are defined in 5 U.S.C. ■§§■ 53 1 2-55 15 ); 

B) (U) Investigation of the Governor, Lieutenant Governor, or Attorney General of any state or 
territory, or a judge or justice of the highest court of any stale or territory', concerning an 
offense involving bribery; conflict of interest, or extortion related to the performance of 
official duties; 

C) (U) The Attorney General, the Deputy Attorney General, or an Assistant Attorney General has 
requested that the FBI obtain prior approval lor the use of consensual monitoring in a specific 
investiption; 

D) (U) A party to the communication is in the custody of the Bureau of Prisons (BOP) or the 
United Stales Marshal Service (USMS) or is being or has been afforded protection in the 
Witness Security Program. A sensitive monitoring circumstance is noE triggered if an FBI 
employee seeks to record an interview with an individual in the custody of the BOP or the 
US MS and the FBI employee has identified himselftherselfasan FBI employee by clothing, 
display of credential or badge, or other means. This exception to required DOJ approval does 
not eliminate the requirement to obtain SAC approval to record such an interview, 

E) (U//FOUO) The use of a prisoner w ho is in the custody of the BOP or the USMS as the 
consenting parly is a '‘sensiti ve monitoring circumstance" that requires additional information 
before DOJ will approve. Accordingly, field offices are required to coord inale the use of a 
prisoner, who is the subject of consensual or non^onsensual monitoring, through the 
responsible FBI HQ operational section. If the individual is in the custody of the BOP or the 
USMS, and the field office wishes to use the prisoner to consensual! y monitor a conversation, 
the field office EC requesting approval to use a prisoner in order to consensual Ey monitor 
communications, or a request far a furl ough or extraordinary transfer of a prisoner to make the 
consensual recording, must contain the following additional information: 

1) (U//FOUO) Location of the prisoner, 

2) (U//FOUO) Identifying data concemingthe prisoner (FBI number, inmate identification 
number, social security number, etc.); 

3) (U//FQUQ) Charge for which prisoner is incarcerated, including date of conviction, 
sentence. Judicial District: 

4) (U//FOUO) Prisoner's arrest record and a summary of the investigation, if applicable: 

5) (U//F0UQ) Necessity for using the prisoner in the investigation; 

6) (U//FQUO) The target of the investigation and his or her role in the crime or organization 
under investigation: 

7) (U//FOUO) The prisoner's relationship or association with the target; 

8) iLWFOUO) A statement whether the target is aware of the prisoner's cooperation with law 
enforcement and if so, the cover story that will be used for the prisoners safely; 

9) (U//FGUO) Nature of the activity' requested (e.g., wear consensual monitoring device, 
furlough, extraordinary" transfer) and a detailed explanation of the role the prisoner is to 
perform;; 

10) (U//FOUO) Security measures that will be taken to ensure the prisoner's safely, if 
necessary, alleviate risk to the public, and to prevent the prisoners escape; 

1 1 ) (U//FOUG) Length of time the prisoner will be needed in the activity; 
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12) i L ■' FGUO) Whether the prisoner will be needed as a witness; 

1 3) (LWFOUO) Whether a prison redesignarion (relocation) will be necessary upon 
completion of the activity; 

14) (U0FQUO) Whether the prisoner will remain in the custody of the FBI, be housed in tail- 
or similar facilities at certain times, and whether he/she will be unguarded except for 
security purposes; 

15) (UtfFOUO) Number of officers on the security detail; 

16) (U//FOUO) Name, address, and telephone number of the federal prosecutor endorsing the 
request and a statement from the prosecutor regarding entrapment; and 

17) (UtfFGUQ) Statement whether the FBI, USMS, or BOP has knowledge or information 
whether the prisoner has an attorney and, if so, whether the attorney has concurred w ith h,; s 
or her clients use. 

(U//FGUO) If approval is obtained, the field office must also; 

AHLWFOUQ) Submit an interim progress report if a continuance beyond the date originally 
projected for conclusion, is needed. A detailed report must be submitted at the conclusion of 
activity; and 

B ) | U//FQUQ) If the pri sonex i s un sentenced or on writ status, a sealed court order must be 
obtained after the request has been approved. 

C) (U//FQUO) See Lhe classified provisions in DIOG Appendix G for additional information 
regarding consensual monitoring. 

(U//FOUO) Procedure for Obtaining DOJ Approval For a Sensitive Monitoring 
Circumstance: In order to obtain DOl approval for consensual monitoring when a sensitive 
monitoring circumstance is involved, the field office must execute an FD-759 and also 
prepare a co ver EC and Letterhead memorandum (LHM) for dissemination by FBIHQ to DOJ. 
The LHM must reiterate the information contained in the executed FD-759 and must be 
reviewed and approved by the CDC orGGC prior to submission to DOJ. 

(U//FOUQ) hmerjfenc£ reguexts i n yoly i tig Sen si 1 1 ve Monitoring Circ umstu trees: Oral 
approval from DOJ can be obtained for exigent requests for consensual monitoring involving 
“sensitive monitoring circumstances” (e,g., when the communication to be monitored is 
expected to lake place before written approval from DOJ can, with due diligence, be obtained) 
by calling. 

A) (U//FQUO) For Criminal matters: The Director or an Associate Director of the C riminal 
Division^ Office of Enforcement Operations, or the Assistant Attorney General, the Acting 
Assistant Attorney General, ora Deputy Assistant Attorney General for the Criminal Division 
at (202) 51 4-6809; in the normal course, the field office should contact the OEG duty attorney 
with the request for emergency approval at (202) 514-5000; or 

B) (U//FQUO) for \aiiottal Security matters; The Office of Intelligence, NSD or the Assistant 
Attorney General, the Acting Assistant Attorney General, or a Deputy Assistant Attorney 
General for National Security at (202) 514-5600. 

(U//FGUG) Note: After normal duty hours* the DOJ command center at (202) 5 1 4-5000 can 
provide a contact number for either the Criminal Division or NSD duty attorney. 
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(U//FOUO) Such oral approval must be reduced to witting and submitted to the appropriate 
FBI HQ official as soon as practicable but within five business days after authorization has 
been obtained, 

(U//FOUO) If an emergency situation requires monitoring at a time when none of the 
individuals identified above tan be reached, emergency approval may be given by the SAC 
w ith notice to FBIHQ operational section and the appropriate DOJ division as soon as 
practicable after the emergency monitoring is authorized* but in all events within five business 
days of the emergency authorization. Emergency authority granted by the SAC (or, as 
delegated, by the A SAC) cannot exceed 30 days and requests for extension must be submitted 
to FBIHQ for DGJ approval. 

18.6.1.7 (UJ Duration oh Approval 

(U7/FGUO) Unless otherwise warranted, approval may be granted for the duration of the 
investigation, subject to a substantial change of circumstances. If one or more sensitive 
monitoring circumstances is present, DOJ may limit its approval to a shorter duration. 

18.6.1.8 (U) Specific Procedures 

(U//FQUO) The follow ing procedures apply w hen obtaining consent. 

18.6.1 . 8 . 1 (U) Documenting Consent to Monitor/ Record 

(U7/FGUO) Whenever possible* written consent must be obtained from the consenting party. 
Written consent must be documented on an FD-472 (Consent to Record), an FD-ID7I 
(Consent to Monitor Content of Electronic Communications), or any subsequent form as 
appropriate. If the consenting party is an FBI employee ora taw enforcement or intelligence 
officer, a properly executed and properly witnessed consent form must be obtained and 
maintained in the appropriate ELSUR sub-file. For CHSs, this documentation must be 
maintained in the CHS file. If a copy of the consent form is placed in an investigative or 
ELSUR subfile, it must not contain the true name of the CHS. The CHS + s symbol number or 
alias name should be used, 

(U//FGUO) If the consenting party is not a CHS, FBI employee* or other law enforcement or 
intelligence officer (i.e.* a “non-con fideniial party"}* and declines to provide a written 
consent* oral consent is acceptable. When oral consent is obtained, at least two law 
enforcement or intelligence officers (one of whom must be a FBI agent or a deputized TFO) 
must witness the consent, and the consent must be memorialized in an FD-302. The fact that 
the consenting party has declined to give written consent should also be recorded on the FD- 
472 (Consent to Record) or FLM071 (Consent to Monitor Content of Electronic 
Communications), or subsequent form as appropriate. This form must be completed by the 
agent or TFO with the exception of the consenting party's signature The consent forms 
remain valid until sueh time as the consenting or authorizing party revokes the consent or 
authorization, either orally or in writing* to an agent of the FBI or FBI Task Force Officer. 

The consent form must be maintained in the appropriate ELSUR subfile. 
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] 8.6. 1 .8. l. £ (Lf) Consensual Monitoring of Computers 

(U//FOUO) When relying on the consent exception to monitor computer communications 
and the computer or other communication device to be monitored is known to be used by 
more than one person, the consent of each and every person whose communications are 
to be monitored must be documented. When documents or other circumstances (e.g., an 
employee agreement, a terms of use document, a corporate or organizational consent 
form) are relied upon to establish implied consent, a complete description of the relevant 
circumstances, including a copy of any language or document establishing implied 
consent, must be documented to the file via EC. Before the monitoring is approved or 
initialed, the CDC orQGC must review the document at issue to ensure that the implied 
consent is legally sufficient. 

18. 6. 1 .8.2 (U) Documenting Approval 

(U//FOUQ) The case agent must document the approval by filing an executed and approved 
FD-759 in the ELSUR subfile. 

18.6.1 .8.3 (V) RPTENTlON OP CONSENSUA LLYM OMTORtD COMMUNICATIONS 

(U//KOUO) The case agent must maintain and store the original recording pursuant to 
applicable ELSUR program policy (See ELS UR Guide. Electronic Surveillance Manual, and 
Election ic Surveillance Issues Located in theOGC Main Law Library). 

18.6.1.8.4 (V) Mul tsple COMMUMCA TIONS 

(U//FOUO) In investigations in which various modes of communication may be conse usually 
monitored (e.g., telephonic. non-lelephonic T electronic communications, etc.), one FD-759 
may be used to document approval, provided that each mode of communication to be 
monitored is being used in the same investigative file and all facts required on the FD-75y are 
the same. If the material facts on the FD-759 vary (e g., more than one consenting party, 
different periods of authority, etc), separate FD-?59s must be executed and included in the 
ELSUR subfile. 

18.6.1.8.5 (U) Invpstiga rtON Specific Appro val 

(U//FOUG) Apptoval for consensual monitoring of communications is investigation specific 
and is not transferable to any other investigation, unless the investigative file under w hich the 
authority was granted is consolidated or rec Lassoed, Additional approval must be obLained for 
any spin-off in vestig^tionts) that arises out of the original investigation. 

18.6.1.9 (U) Compliance and Monitoring 

(U//FOUO) Case agents and supervisors must regularly monitor the use of this method to 
ensure that the continued interception of communications is warranted and lawfully obtained 
by virtue of consent express or implied, from a parly to the communication. Such monitoring 
shall include a review of the investigative file to ensure that consent and authorization forms 
are in the ELSUR subfile and properly completed by the requesting agent. ELSUR program 
personnel must review all submitted FD-759S and consent forms (PLM72 and FTM071) to 
ensure proper approval is documented for the consensual monitoring of communications. 
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1 8 L 6.2 (U) IN VESTtGA T1 V£ METHOD: IN TERCEPTiNG THE COMMUNICA TiONS OF A 

Computer Trespasser 
18,6,2.1 (U) Summary 

(U) The wire or electronic communications of a computer trespasser to, from, or through a 
protected computer may be intercepted and collected during a Predicated Investigation. Use of 
this method requires SSA approval and review by the CDC (Office of Origin — Field Office) 
or the OGC (Office of Origin - FBIHQ). (AGG-Dom, Part V.A,4) 

18.6.Z .2 (U) ApplI tAt IdN 

(UtfF'OUO) This investigative method maybe used in Predicated Investigations, positive 
foreign intelligence collection investigations, and for assistance to other agencies when it is 
not otherwise prohibited by AGG-Dom, Part 1ELB.2-3. This method cannot be used during an 
Assessment. 

18.6.2.3 (U) Legal Authority 

A) (U) The Fourth Amendment to the United Slates Constitution and case taw interpreting the 
same; 

B) (U) The Wiretap Statute, ] S U.S.C. & 251 1, prohibits the intentional interception and use of 
wire, oral, or electronic communications absent an exception; 

C) (U) Computer Trespasser Exception, 18 U.S.C. § 251 l(2)(i); and 

D) {U)The Foreign Intelligence Surveillance AcloF 1978 (FISA), 50 U.S.C. §§ I SOI a seq., 
requires Court authorization for "electronic surveillance." FISA specifically provides, 
however, that the acquisition of computer trespasser communications that would be 
permissible under 18 U.S.C. § 251 l(2Ki) are not subject to the FISA Court order requirement 
far electronic survdl lance of wire communication under section 10 1 (f)(2) of FISA. 50 U.S.C. 
$1* 01(0(2). 

1 8.6.2 .4 f V) D if'JSilTJOW OF THE COM MUN JCATJONS Of A COM PUTER TRESPASSER 

(U) Generally, the Wiretap Statute (also referred to as Title III), 18 U.S.C. 2510-2522, 
prohibits the intentional interception of wire, oral, or electronic communications unless one of 
several exceptions applies. One such exception is the interception of a computer trespasser's 
wire or electronic communications to, through or from a protected computer based on the 
authorization of the owner or operator of that computer. Another statutory exception is based 
on the consent of a party to the communication. This section relates specifically to the 
computer trespasser exception; the policy on consensual recording of computer 
communications can be found at DlOG Section 18.6,1. 

(U) The computer trespasser exception to the Wiretap Statute, 18 U,S.C, § 251 1(2Ki), permits 
a person acting under color of law to intercept the wire or electronic communications of a 
computer trespasser that are transmitted to, through, or from a protected computer when the 
owner or operator of that computer authorizes the interception. The use of this method does 
not include retrieving or obtaining records of communications that have been stored on the 
computer or elsewhere after the communication has occurred. 
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(U) Hie statute requires: 

A) (U> The owner or operator of the protected computer to authorize the interception of the 
trespasser's communications on the protected computer: 

B) (U}The person acting under color of law to be engaged in a Lawful investigation; 

C) (U) The person acting under color of law to have reasonable grounds to believe that the 
contents of the tnespas ser's communications will be relevant to the investigation; and 

D) (U) The interception is limited to the communications transmitted to or from the trespasser. 

(U}The case agent is responsible for documenting the basis for the conclusion that the pers 
who provided authorization to intercept the trespasser's communications is either the owner 
or operator of the protected computer. The “owner or operator" must have sufficient author 
over the protected computer/computer network system to authorize access across the entire 
system. This could be a corporate officer, CIO, or system administrator, if the system 
administrator has authority across the entire system. In any instance in w hich the 
identification of the owner or operator is not plainly evident, the case agent must seek the 
assistance of the CDC or the OGC to identify the proper owner or operator. 

(U) A "protected computer," 1 defined in IS U,S,C. § iCGOfe), has been generally interpreted : 
be any computer or computer network device connected to the Internet, although it also 
includes most computers used by a financial institution or the United States Government 
regardless of whether the computer is connected to the Internet. 

( U) A “computer trespasser' 1 is a person who accesses a protected computer without 
authorization and thus has no reasonable expectation of privacy in any communication 
transmitted to, from, or through the protected computer. The definition of computer trespasser 
does not include a person known by the owner or operator to have exceeded their authority or 
to have an existing contractual relationship w ith the owner or operator for access to all or pan 
of the computer, (18 U,S.C, § 2510(21}) 

(U) The trespasser exception and the consensual monitoring of communications exception am 
related, but separate, exceptions to the Wiretap Statute, The owner, operator, and authorized 
users of a protected computer can consent to the monitoring of only those communications 
they send or receive (he., communications to which they are a parly), which do not include a 
trespasser's communications. (See DIOG Section 18.6. 1 ) In comparison, under the trespasser 
exception, the ow ner or operator may only authorize the interception of the communications 
of a trespasser transmitted to, through or from the protected computer. 

(U) When applicable, the computer trespasser and consensual monitoring of communications 
exceptions to the Wiretap Statute can be used together, permitting the interception of 
communications of both authorized users and trespassers on the protected computer. This is 
particularly useful w hen it is difficult to discern the trespasser communications from other 
communications. I fit is possible to obtain consent to monitor the communications of the 
authorized users, using the consent and trespasser exceptions together can mitigate the risk of 
over or under collection of the trespasser's communications. See DIOG Section 18,6,1 for the 
policy regarding consensual monitoring of computer communications. 
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1 B.6. 2 . 5 [U//FQ UO) Use an d Approval Requ i re ments for 1 hterceptinc th e 

Common icati o ns o f a Computer Trespasser 

18. 6.2. S. 1 (Uj Generai A ppkova l R^uirements 

( LWFOUQ) An SSA may approv e the use of the computer trespasser exception, subject Lo 
CDC orOGC review. Approval is conditioned on the following criteria being met and 
documented on the FD-759 and through other supporting documentation in the investigative 
file: 

1 8.6.2 .5.1.1 ( U > Reasons for t he I nte rce p tign 

(U//FOUO) The synopsis portion of the FD-759 must include sufficient facts to support 
the need for the interception and to explain how the contents of the trespasser's 
communications will be relevant to the investigative purpose. 

1 8.6.2 .5.1.2 (U > OWN Ek OR OPE R ATOk A DTK OkIZAT ION 

( UtfFGUO) The authorization of the ow ner or operator of the protected computer ( w ho 
may be the system administrator, as stated above) to a person acting under color of! aw to 
intercept the trespasser communications on the protected computer system or network 
must be documented using the FD-1070., Authorization to Intercept the Communications 
of a Computer Trespasser. The steps the case agent takes to ensure that the person 
providing the authorization is the actual or appropriate owner or operator of the protected 
computer must be documented in the investigative file. See 18.6.2.6 below for specific 
procedures. 

18.6.2.5. 1.3 (U) ACQUIRING ONLY TRESPASSER COMMUNICATIONS 

(U//FOUG) W hen intercepting communications under the computer trespasser exception 
alone (i.e. + not in conjunction with consensual monitoring of electronic communications), 
the collection must not intentionally acquire communications other than those loor from 
the trespasser. This can often be technically complicated to accomplish depending cm the 
use and configuration of the protected computer and the sophistication of the trespasser. 
The steps lo be taken to identify trespasser communications and lo isolate such 
communications from those of authorized users must be considered by the approving and 
reviewing officials and documented in the investigative file. See DJOG Section 18.6.2.6 
below for specific procedures. 

18.6.2.5.1.4 (U) Owner or Operator Collection 

(U//FOUG) The interception of trespasser communications may be conducted by the FBI 
or by the owner or operator of the protected computer at the FBI’s request. In either 
instance, the interception is being conducted under color of law. If the collection is not 
being conducted by the FBI, the case agent must document that he or she has informed 
the person conducting the interception that it must be accomplished in conformity w ilh 
the statute. 
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ISA 2.5. 1.5 (UJ Location ok Intercept 

(U//FGUQ) If Lhe intercept or collection of the trespasser comm uni cat ions will occur 
outside of the field office of the approving official, lhe SAC or AS AC of the field office 
within which the interception w ill occur must be notified* and the notification must be 
documented in the investigative file. 

18.6.2 .5.1 A (tJ) Duration 

(U//FOUO) lhe request for approval (FD-759) must slate the length of lime needed for 
the interception. Unless otherw ise warranted, approval may be granted for the duration of 
the investigation, subject to a substantial change of circumstances, as described in DIQG 
Section 18.6.2.6, below . 

18.6.2.5.1.7 (U) Legal Review 

(L7/FOUO) Prior to the opening of the interception, the CDC orOGC must concur that, 
given the facts of the investigation, the interception appears to be law ful under the 
computer trespasser exception. Whenever the factors surrounding the use of the approved 
technique change substantially* a new FD-759 must be executed. The new ly executed 
FD-759 must include refreshed concurrence of the CDC or GGC. (AGG-Dom, Part 
V.A.4.) The following arc examples of substantial changes in the circumstances of the 
interception that require a new FD-759: a change in owner or operator, a change in the 
method of collection, or the change or addition of a protected computer system. On the 
other hand, technical changes in the collection system for the purpose of improving or 
refining the interception arc usually not substantial changes to the circumstances of the 
interception. 

18. 6.2.5. 1.8 (U) Joint Investigations 

(U//FOUO) In joint investigations, if the FBI is the lead investigating agency, FBI 
policies and guidance regarding the interception of computer trespasser communications 
must be followed If the FBI is not the lead investigating agency, the policies of the lead 
investigating agency must be followed and documented to the appropriate FBI 
investigative file. 

1 8.6.2 .5.1.9 (U) E VTRATERRITOR I AL CONSI DE RATIONS 

(U//FOUO) If the investigation involves a computer trespasser or other subjects that the 
FBI reasonably believes are located in a foreign country 1 , the ease agent should consult 
the DOJ Ex irate rritorial Guidelines, memoranda of understanding, and FBI guidance 
regarding proper notification and coordination requirements. 
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1 8.6. 2 .6 (U J Duration of Appro v al for Intercept! ng the Comm u nic ati on s of a 
Computer Trespasser 

(U//FOUO) The interception and collection of computer trespasser communications under the 
computer trespasser exception may be approved for a specified length of time or for the 
duration of the particular investigation, 

13. 6.2 .7 ( U J Spf u F it Procedures for Intercept^ g th e Co m mun ications of a 
Computer Trespasser 

(U//FGUO) The following procedures apply when obtaining authorization. 

1 a 6,2. 7. 1 (U) DOCUMENTING A VTHOMZA TlON TO INTERCEPT 

CUV/FOUO) Whenever possible, written authorization must be obtained from the owner or 
operator of the protected computer and documented on an FD- 1070, Authorization to 
Intercept the Communications of a Computer Trespasser. 

(U//FOUO) If the authorization from the owner or operator is provided orally, at least one FBI 
agent and another law enforcement or intelligence officer should w itness the authorization, 
and the authorization must be memorialized in an FD-302. The fact that the authorizing party 
has declined or was unable to give written authorization must also be recorded on the FD- 
1070, Authorization to Intercept the Communications of a Computer Trespasser form, This 
form should then be executed in all respects w ith the exception of the authorizing party's 
signature, 

(U//FGUO) The case agent must document to the file (i.e., FD-302 or EC) the facts that 
establish that the person providing the authorization is a proper party to provide authorization 
for the anticipated interception 

(U//FOUO) I f the case agent is seeking approval for the FBI to engage in both consensual 
monitoring and an interception of the computer trespasser on the same computer system, 
separate forms - one providing consent to monitor the communication to which the consenter 
is a party and one providing the authorization to the intercept the trespassers communications 
— must be completed. 

l B. 6.2. 7.2 (U) Acquiring Only the Trespasser Commumca tmns 

(UWFOUO) The computer trespasser exception permits the FBI to intercept only trespasser 
communications. Prior to seeking approval to intercept computer trespasser communications, 
the case agent must coordinate the use of the method with the Field Office Technical Advisor 
by submission of an Electronic Technical Request (ETRJ, On receipt of the ETR, the 
Technical Advisor must ensure that the technical equipment and expertise necessary to 
lawfully implement the intercept! on are timely provided follow ing approval to use this 
investigative method. 

(U/fFOUO) Many of the technical challenges and risks associated with accurately isolating 
the trespasser comm unications can be mitigated by also obtaining consent to monitor the 
computer or a court order. The possibility of using the authority to intercept trespasser 
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communications in conjunction with consent should be raised at the time of the ETR 
submission or as soon thereafter as the case agent determines that the authorized users of the 
protected computer will consent to FBI monitoring. 

(U//FOUO) When intercepting trespasser communications, the case agent must prepare an 
FD-3G2 or EC detailing the steps taken to identify trespasser communications and to isolate 
such communications from those of authorized users. For example; "reviewed system logs 
provided by the system administrator and identified a trespasser accessing the system at the 
following dates and times via IP address xxx or port XXX," Additionally, any subsequent 
review or revision of the steps needed to identify and isolate the trespassers communications 
must also be documented to the investigative file by an EC or ED '302, as appropriate. 

1 8.6.2. 7.3 (U) Renewing the accuracy of the I ntter ceptio n 

(U//FOUO) At the opening of interception and collection of computer trespasser 
communications, the Technical Advisor or designated technically trained agent (TTA) 
coordinating the implementation of the interception and collection device shall ensure that 
appropriate collection parameters are implemented as required by OTD policy and 
procedures. 

(U//FQUO) The case agent shall ensure a timely initial review of the collected information to 
verify that the interception and collection ait limited to communications authorized for 
interception and collection under the trespass authority or other lawful exception. Following 
this initial review, the case agent shall ensure that a similar review and evaluation is repeated 
at appropriate intervals throughout the duration of the interception to ensure that the 
interception and collection remain within the scope of Lhe trespasser or other law ful 
exceptions. 

(UtfFOUG) Any FBI employee who identifies interception and collection of communications 
that may be outside the scope of the trespasser or other lawful except ion shall immediately 
notify the case agent and the operational SSA of the possible unauthorized interception and 
collection of communications. Upon the determination that communications have been 
unlawfully intercepted or collected, the interceptions and collection must be hatted 
immediately. The case agent must consult with a TTA to determine whether collection may be 
resumed in a manner that assures further unlawful collections will not occur. If the SSA 
determines that unlawful collection can be reliably prevented, that determination must be 
documented to the file before lawful interceptions and collection may resume. 

(LV/FOUG) The content of communications determined to have been unlawfully collected 
cannot be used in any manner and shall be removed promptly from all FBI systems and 
destroyed. A memorandum documenting the removal and destruction shall be fried in the 
main investigation file and ELSUR Sub File, 

1 8. 6.2. 7.4 (U) Reviewing the relevancy of the Interception 

(U//FGUO) The trespasser exception requires the FBI to have a reasonable belief that the 
contents of the trespasser’s communications will be relevant to the investigation. Following 
opening of the interception and collection of the trespasser communication, the case agent 
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must ensure that the collected communications are reviewed, at appropriate intervals 
throughout the duration of the interception, to determine whether the interception is and 
continues to be relevant to the authorized investigation, 

18.6.2.7.$ (U) Duration of Approval 

(U//FOUO) Authorization to intercept trespasser communications remains valid until such 
time as the authorizing party, orally or in writing* revokes the authorization or on the 
termination date of the authorization, whichever comes first, 

1 8.6.2. 7 6 (U) ElSttR REQUIREMENTS 

(U//F0UO)The information obtained from the collection must be retained in conformity with 
the ELS UR Policies {See ELSUR Guide. Electronic Surveillance Manual, and Electronic 
Suryei 11 ance Issues located in the OGC Main Law Library) or other applicable policies, 

18.6.2.7.7 (U) Multiple Commun/ca rtoNs 

(U//FOUO) In investigations in which various modes of communication may be intercepted 
(eg,* telephonic, non-lelephonic T electronic communications, etc., or the use of consensual 
computer monitoring in conjunction with the interception of trespasser communications), one 
FD-759 may be used to document approval, provided that each mode of communication to be 
monitored is being used in the same investigative file and all facts required on the FD-7S9are 
the same. If the material facts on the FD-759 vary {eg., different periods of authority, etc.), 
separate FD-?59s must be executed, 

1 8.6.2. 7. 8 (U) iNV£STi6A TloN SPECtfiC APPROVAL 

(U//FOUO) Approval for intercepting a computer trespasser's communications is 
investigation specific and is not transferable to any other investigation, unless the 
investigative file under w hich the authority w as granted is consolidated or reclassified. 
Investigation specific approval must be obtained lor any spin-off investigations) that arises 
out of the original investigation, 

1 y . 6 . 2 .y ( U ) Compliance an d M on itoring 

(Uy/FOUO) Case agents must regularly monitor the use of this method to ensure that the 
continued interception of trespasser communications is warranted and being law fully 
conducted. Such monitoring shall include a review of the investigative file to ensure that 
consent and authorization forms have been properly executed and filed. ELSUR program 
personnel must review all submitted FD-759s and FD-1070 {Authorization to Intercept the 
Communications of a Computer Trespasser form) to ensure proper approval has been 
documented for the interception of computer trespasser communications. 
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18. 6.3 (U) Invests a tive Method: Closed Circuit Television/Video 

Surveillance, Direction Finders, and other Monitoring Devices 

18.6.3.1 (C) Summary 

(U//FOUO) During Predicated Investigation the FBI may use Closed-Circuit 
Television/Video Surv eillance, Direction Finders, Electronic Tracking Devices, Forward- 
Looking Infrared (FLIR) Cameras pother than aircraft mounted FLIR, see DIOG Section 
1 8.5. 8 for those procedures), and other non-communication monitoring dev ices. These 
methods usually do not require court orders or warrants unless they inv olve monitoring an 
area or place where there is a reasonable expectation of privacy, physical trespass is required 
to install the device or non-consensua] monitoring of communications will occur. Use of these 
methods requires prior legal review by the C DC or OGC and SSA approval, except as noted 
below. 

18.6. 3.2 (U) A PPLi cation 

(U//FOUQ) This investigative method may be used in Predicated Investigations and positive 
foreign intelligence collection investigations and for assistance to other agencies w hen it is 
not otherwise prohibited by AGG-Dom. Part 1II.B.2-3. This method cannot be used during an 
Assessment, 

18.6.3.3 (U) Legal Authority 

A} (Lf) AGG-Dom, Part V 

B) (U) Tracking devices use (18 U.S.C. § 2510(12X0 

C) (U) Rule 41 Federal Rules of Criminal Procedure 

D) (U) Fourth Amendments the United States Constitution 

18.6.3.4 (U) Definition of Investigative Method 

A) (U//FOUO) dosed Circuit Television/Video Surveillance fCCTVA' f ideo Surveillance^ a 
fixed-location video camera/dev ice that is typically concealed from view or that is placed on 
or operated by a consenting party. 

B) (U//FDUO) Electronic Tracking Peaces: Direction lindens include electronic tracking 
devices, such as, radio frequency {RF) beacons and transmilters, vehicle locator units, and 
various devices that use a Global Positioning System {GPS) or other satellite system for 
monitoring non-communicalion activity. Electronic tracking devices are specifically excluded 
from Title 111 requirements ( 1 8 U.S.C. $ 25 10( 12 HO). 1° circumstances where a court order is 
required (pursuant lo FRCP Rule 4 l(eX2)(C),, a judge or magistrate may authorize the use of 
an electronic [racking device within the jurisdiction of the court and outside that jurisdiction, if 
the device is installed in E hat jurisdiction. {FRCP Rule 4l{bX4)i;lS U.S.C. § 3117) 
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18.6.3.5 (U//FOUO) STANDARDS f Oft USE AND APPROVAL REQUIREMENTS FOR 
INVESTIGATIVE METHOD 

(U//FOUO) When a video camera is physically operated as a hand-held video and is used in 
an area in which no one has a reasonable expectation of privacy, its use is equivalent to using 
a still camera and does not require CDC review or SSA approval. 

(U//FOUO) Except for a hand-held video as described above, CDC or OGC review and SS A 
approval is required for the use of CCTV/ Video Surveillance, tracking devices, and other 
monitoring dev ices. CDC review and SSA approval must be documented using Lhe FD-759. 
SSA approval maybe granted if the foil owing criteria have been men 

A} (UZ/FOUQ) Legal review and concurrence from the CDC or OGC that a court order is not 
required for installation or use of the device because there has been lawful consent no 
reasonable expectation of privacy exists, or no physical trespass is necessary to install the 
device. Whenever circumstances change in either installation or monitoring, a new legal 
review must be obtained to determine whether a separate authorization is necessary: 

B) (U//FOUQ) Use of the method is reasonably likely to achieve investigative objectives; 

C) (U//FQUO) Appropriate safeguards exist to ensure that unauthorized monitoring does not 
occur. For example, if a fixed-location monitoring device is used based on the consent of a 
party, the consenting party must be admonished and agree lt> be present during the duration of 
the monitoring, and, if practicable,, technical means should be used to activate monitoring only 
when the consenting party is present 

18.6.3.6 IU) Duration of Approval 

(U//FOUO) Approval for the use of this method may be for the duration of the investigation, 
except when: (t) a substantial change occurs in the location of the CCTV/Video Surveillance 
or monitoring device, (ii) a substantial change occufs in the area to be subjected to 
CCTV/Video Surveillance; or (Hi) there is a change in the primary subject of the surveillance. 
In each of these circumstances, new approval is required. If a court order is required, the court 
order w ill specify the duration of authorization. 

18.6.3.7 (U) Specific Procedures 

( U//FOUO) To use this method, the case agent must: 

A) (U//FOUO) Submit an FD-759 for CDC or OGC review and SSA approval for video (not 
hand-held video where there is no reasonable expectation of privacy), tracking devices, and 
other monitoring devices. 

B) (U//FOUO) Maintain the approved FD-759 in the field office ELSUR Subfile and a copy in 
[he field office CCTV/Video Surveillance control file. 

C) (U//FOUO) If authorization is based upon consent obtain consent from both lhe participant in 
the activity being monitored/viewed and the person having control over the location where the 
monitoring device will be installed, if they axe not the same person. If it is not possible or 
practical to obtain written consent, oral consent is permitted if witnessed by two law 
enforcement officers {one of whom must be an agent of the FBI, deputized task force officer, 
or other federal agent). A consent form (FIM72J should be executed and properly witnessed 
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in all situations requiring consent for the monitoring/! retaliation, even if the consenting party 
is a CHS, FBI employee, or any other law enforcement officer. 

D) (U//F0U03 The OTD policy may also require submission of a written request for the use of 
certain equipment and personnel. 

18.6.3.8 (u) CCTV/ViDEO SURVEILLANCE WHERE THERE IS A REASONABLE EXPECTATION OF 
P ftl VACV I N THE AREA TO BE VIEWED 0 K FOR THE I N&TALLATION OF THE EQUIPMENT, 

{ U//FOUO) A w^arranl/eourt order is required for the use of CCTV/Video Surveillance when a 
reasonable expectation of privacy exists in either the area 10 be viewed or the location where 
the equipment wit! be installed, unless the installation and monitoring is being conducted 
pursuant to consent. 

A) (U//FOUO) Criminal Investigations: When there is a reasonable expectation of privacy in the 
area to be viewed and no consenting party, prior DOJ/QEQ approval is required before 
seeking a wanant/order. When there is a reasonable expectation of privacy only in [he location 
where the CCTV/Video Surveillance equipment will be installed, but no! in the area to be 
viewed, prior DOJ/GEO authorization is not required to- seek a wamant/order For the 
installation. In an emergency situation where CCTV usage is desired and a warrant 'court order 
would be required, but cannot be obtained within die time required, an AUSA must be 
contacted to seek DO J/OEO's guidance on how to proceed. 

BO (U//FOUO) National Security investigations: The use of CCTV/Video Surveillance in 
national security investigations under the Foreign Intelligence Surveillance Act of J97S 
(FISA) requires the filing of an appropriate FISA court order because the use of CCTV/Video 
Surveillance falls within the definition of "electronic surveillance'' under FISA. See DIGG 
Section S8.73. 

C) (U//FOUQ) H 'here a warrant is required and the request is included with a Title I/I or is a 
F/S.i request: Where the CCTV/video surveillance request is made pursuant to FISA or in 
conjunction with a Title III request, the required supervisory approvals and CDC or OGC 
review will lake place as part of the larger FISA or Title 111 review and approval process. No 
additional reviews or approvals for the CCTV/video surveillance are required. 

D) (U//FQUO) H'here a warrant is required and the request is NOT counted with a Title 111 
re quest or made pursunnf to FtS. 1: As the FD-759 is not used when a court order is needed, 
the required SSA approval and CDC or OGC review must be documented in an EC. A copy 
of the approving EC must be maintained in the field office ELSUR Subfile and a copy in the 
field office CCTV/Video Surveillance control file. 

(L7/FGUG) For additional information regarding the use of CCTV/Video Surveillance when a 
reasonable expectation of privacy exists, see the Video and Physical Surveillance Programs 
Policy Implementation Guide. 

18.6.3.9 (U) Compliance and Monitoring 

(L7/FOUO) Authorisation documents regarding the use of the CCTV/Vidco Surveillance and 
electronic tracking devices {direction finders j must be documented in the investigative 
ELSUR file and will be available for compliance and monitoring review. 
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1 8. 6 A (Uj iNVESTIGA T1 VE METHOD: A DM1MSTRA TIVE SUBPOENAS ( COMPULSOR Y 

PROCESS) 

18*6.4.1 (U) Overview of Compulsory P&ocess 

(U//FOUO) Compulsory processes may be used to compel the disclosure of records and other 
tangible things relevant to an authorized investigation. Compulsory process in a Predicated 
Investigation includes, but is not limited to, the use of administrative subpoenas (as described 
below in this section); grand jury subpoenas (DIOG Sections 18.5,# above and 18,6.5); trial 
subpoenas requested by the prosecuting attorney and issued by the trial judge; National 
Security Letters (NSL) (DIOG Section 18,6.6); and FJSA Orders for business records (DIGG 
Section 18,6.7), Compulsory process is used to gather information in furtherance of FB I 
investigations. The FBI’s authority to use such compulsory process is based upon Executive 
Branch delegated authorizations, statutes, regulations and the Federal Rules of Criminal 
Procedure (FRCP). 

(U) An FBI CHS cannot be tasked to obtain records protected by the RFPA, FCRA, EC PA, 
Buckley Amendment, except as specifically authorized by such law, 

18.6.4,2 (U) Application 

(U^/FOUG) Administrative subpoenas may be used during certain predicated criminal 
investigations as authorized by statute. They may not be used for assistance to other agencies, 
unless their issuance is also relevant to an already open FBI Predicated Investigation as 
specified below . 

1 8.6.43 (U) Administrative subpoenas 

18. 6. 4.3. 1 (U) Summary 

(U) The Attorney General has the authority to issue administrative subpoenas pursuant to two 
provisions of the United States Code, 21 U.S.C. § 876 and 18 U.S,C, § 3486. The FBI has no 
inherent authority to issue administrative subpoenas but has delegated authority from the 
Attorney General to do so. The use of administrative subpoenas is limited to three categories 
of investigations — drug program investigations, child sexual exploitation and abuse 
investigations, and health care fraud investigations — and may not be used for any other 
purpose. The delegated authority varies depending on the federal violation being investigated. 
The type of information that can be obtained using an administrative subpoena is also limited 
by law and by policy of the Attorney General, 

(U//FOUO) Within the FBI, the authority to issue administrative subpoenas Is limited to 
positions authorized by the Attorney General; that authority may not be further rede legated. 
This is an exception to the general delegation authority described in DIOG Section 3.4,C. An 
FBI employee properly designated to serve in an "acting’ 1 capacity in a position holding the 
delegation may issue an administrative subpoena. For issuing administrative subpoenas, relief 
supervisors may not exercise this authority during routine absences of the SSA or supervisory 
senior resident agent (SSRA) unless the SAC has specifically designated the relief 
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supervisors} as “acting" SSA or SSRA. All such "acting" designations must be in writing and 
appropriately retained as set forth in DIOG Section 3.4, 

l & 6 . 4.32 (V) Legal authority and Delega tioh 

18.6.4,3.2. 1 ( L') INVESTIGATIONS INVOLVING THE SALE, TRANSFER, MANUFACTURE 

UK IMPORTATION OF UNLAWFUL DRUGS 

(U > Authority : 2 \ U S.C. § 876 and DOJ Regulation at 28 C F.R. App to Ft U, SubpL R <j 
4 , 

i LI \ May be issued to: Any individual or business holding records relevant to the drug 
investigation. 

(U) Records to be obtained: Any records relevant or material to the investigation. 

(L7/FOUO) Delegated authority to issue: By DOJ regulation, the Attorney General’s 
delegation includes SACs, ASACs* SSRAs and ‘Those FBI Special Agent Squad 
Supervisors who have management responsibilities over Organized Crime/Drug Program 
investigations" 

(UftFQUO) Vf utii-vffense ttt vexfiaationn: These administrative subpoenas may be issued 
for records relevant to an investigation regarding the sale* transfer, manufacture, or 
importation of unlawful drugs. On occasion, the drug offenses are being investigated with 
other offenses. In such instances, an administrative subpoena may only be issued for 
matters relevant to the drug investigation. The drug investigation may not be used as a 
subterfuge to use an administrative subpoena to obtain information that is not relevant to 
the drug investigation. If the information being subpoenaed has relevance to both the 
drug investigation and to the other aspects of the investigation, the information obtained 
with the administrative subpoena may properly be used in all aspects of the investigation. 

(U//FGUG) Confidentiality; The recipient of an administrative subpoena is not 
prohibited from disclosing to the subject that records have been provided in response to 
an administrative subpoena. The Right to Financial Privacy Act limitations described in 
DIOG Section 1 8.6.4. L4 applies. If an administrative subpoena is served on a provider of 
“electronic communication service" or a "remote computing service/’ the provisions in 
the ECPA govern, as discussed in DIOG Section 18.6.4. 1, 4. 

1 8.6.4 J,2.2 {U ) Investigations i n volv i nc th e se\u a l exfloi tation or ahi se 

OF CHILDREN 

f U } Authority: 18 U.S.C. ft 3486(a) and Attorney General Order 3220-201 D. 

f U ) Ifqy be issued to: A "provider of an electronic communication service" or a “remote 
computer service" (both terms defined below in DIOG Section 18.6.4.1 .4.2 b) and only 
for the production of basic subscriber or customer information The; subpoena may 
require production as soon as possible but in no event less than 24 hours after service of 
the subpoena. 
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(U) Record* to be obtained: Records relevant to the investigation are limited to the 
fallowing specific subscriber information: customer or subscriber name; address; local 
and long distance connection records, or records of session Limes and durations; length of 
service (including start date) and types of service useti telephone or instrument number 
or other subscriber number or identity, including any temporarily assigned network 
address (this includes IF address); and means and source of payment for such service 
(including any credit card or bank account number). 

(U//FOUU) Delegated authority' to issue: ADlCs, SACs. ASACs, SSRAs. Section Chiefs 
of the Criminal Investigative Division + s (ClD) Violent Criminal Threat Section and 
Cyber Division's (CyD) Strategic Outreach and Initiatives Section; the Unit Chiefs of 
CID's Crimes Against Children Unit and of CyD's Innocent Images National Initiative 
Unit and Innocent Images Operations Unit; those SSAs assigned to the Innocent Images 
Operations Unit with supervisory responsibility over assigned FBI personnel; those SSAs 
detailed to National Center for Missing and Exploited Children (NCMEC) with 
supervisory authority over assigned FBI personnel; and operational squad supervisors 
who have management responsibility over Innocent Images/Crimes Against Children 
programs. 

( Uy/FOUG) dotations to which thin authority applies: These administrative subpoenas 
may only be issued in investigations that involve a violation of IS U.S.C. §§ I2QL 1591, 
224 1(c), 2242, 2243, 225 ! , 225 ] A, 2252, 22 52 A, 2260, 242 1 , 2422, or 2423 in which the 
victim is less than 18 years old. Under the Attorney General + s delegation, an 
administrative subpoena in these investigations may be issued only to "providers of 
electronic communication services” or to “remote computing services” to obtain the 
information listed above. These administrative subpoenas may not be issued to any other 
person or entity or to obtain any other information, including the content of 
communications. There is no legal prohibition on the recipient of an administrative 
subpoena from disclosing to the subject that records have been provided in response to an 
administrative subpoena. 

18.6.4.3.2.3 (U> 1NV ESTIMATIONS INVOLVING FEDERAL HEALTKCahE FRAUD 

OFFENSES 

(U) Authority : 18 US.C. § 3486(a) 

(U) Records ur be obtained: Records relevant to an investigation relating to a “federal 
health care offense. “ Federal health care offense is defined in 18 U.S.C. § 24. 

(U) -Vfg£ be issued to: Any public or private entity or individual with records relevant to 
the federal health care offense. (These are referred to in guidance issued by the Attorney 
General as “investigative demands/') 

(LWFQUO) Delegated authority to issue: The Attorney General has not delegated 
signature authority to the FBI. AG authority is delegated only to personnel within DOFs 
Criminal Division and to United States Attorneys, who may redelegate the authority to 
AUSAs. FBI employees must request an AUSA to issue administrative subpoenas in 
health care fraud investigations. 
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(U) Umittitiims: The Right to Financial Privacy Act (RFFA) limitations described in 
paragraph D of this section apply. The provisions in EC FA govern, as discussed in 
paragraph D of this section, if the request for records is addressed to a '"provider of 
electronic communication service” or a “remote computing service," The subpoena may 
not requite the production of records at a place more than 500 miles from the place the 
subpoena is served. 

(U) There is no legal prohibition on the recipient of an administrative subpoena from 
disclosing to the subject that records have been provided in response to an administrative 
subpoena. 

(U) Restriction on use of h ealth care injormation anuinyt the irtdi virtual: Pursuant to I ft 
U.S.C, $ 3486, health information about an individual acquired through an authorised 
investigati ve demand may not be used in. or disclosed to any person for use in, any 
administrative, civil, or criminal action against that individual unless the action or 
investigation arises from and is directly related Lo receipt of health care, payment for 
health care, or a fraudulent claim related to health cate. 

18.6.4.3.3 (U)AfProval Requirements 
1 8.6.4J.3. 1 (U ) Reql i rfd form 

A) (U) An administrative subpoena must be prepared and issued using the electronic FD- 1035 
form (Administrative Subpoena) or a successor electronic form authorized for this purpose. 
The online form is designed to ensure an administrative subpoena is: { I ) issued only in 
investigations w here its use is permitted: (2) used to demand information that can be obtained 
wiLhin the applicable legal and policy limitations: and |3) signed by an individual with proper 
authority. The FD-1035 must be uploaded inlo ihc subpoena "SBP"' subfile in the relevant 
investigative file from which it is issued. An electronic copy of the subpoena will 
automatically be saved in the FD-1035 data base when it is uploaded. 

B} (U)The FD-6 1 7 (Administrative Subpoena for Drug Program Investigations) and FD-909 
(Administrative Subpoena for Child Sexual ExploitationMbuse Investigations) remain 
temporarily available but their use is restricted to emergency situations when the FD-1035 is 
not available. Whenever the FD-6J 7 or FD-909 is used, the legal requirements and the 
delegation authorities discussed above apply. Any subpoena issued using an FD-61 7, FD-909, 
or successor form must be uploaded into automated case support (ACS}. Additionally, 
whenever the FD-61 7 or FD-909 is used, as soon as possible the FBI employee must also 
complete an FD-1035 using the identical in formation . The employee should not serve the 
subpoena generated by the FD-1035 but must attach it to the file copy of the FD-6 1 7 or FD- 
909 roling the date of service. 

C) (Uj An FD-1035 administrative subpoena addressed to an electronic communication service 
provider contains an attachment explaining the meaning of various terms used in the demand 
for information. Some electronic communication service providers have adopted their own 
“riders’" for use with subpoenas. These "riders" 1 may not be used as an addition to any 
administrative subpoena issued by the FBI or proposed by the FBI for issuance by a DOJ 
attorney without approval from OGC or the CDC. That approval must be documented to the 
file. 
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L8.6.4.3.3.2 (U) Approval authority 

fU/ZFOUO) Use of an administrative subpoena requires SSA approval. The subpoena 
may be issued by the SSA if that SSA is among those with delegated authority to do so. 
See DIOG Sections LS.6,4.2,2.1 - i 8.6.4. 2.2.3 above) Otherwise, the subpoena must be 
for* arded to an individual with the proper delegated authority. Further review and 
approval may be required depending on the delegation. Review by the CDC is 
appropriate iflegat questions arise in preparing and issuing the subpoena. 

(U//FOUG) An individual designated by proper authority to sene in an "acting" status in 
one of the positions with delegated authority may sign and issue an administrative 
subpoena. The “acting*" status must be documented in an appropriate field office 
administrative file. AH such "acting 1 * designations must be made in writing and 
appropriately retained as set forth in DIOG Section 3. 4.3.2. 

1B.6.4.3.4 (U) Limita nows on Use of A dministra ti ve Subpoenas 

L 8. 6.4.3. 4. 1 (U) FINANCIAL PRIVACY LIMITATIONS 

IS. 6. 4 J . 4. LI (L) OB TAMING RECORDS FROM A FINANCIAL INS TITUTION 

(UZ/FOUQ) “Financial records” are those records that pertain to a customer’s relationship 
with a financial institution. The term “financial institution 1 * is broadly defined as a bank, 
savings bank, card issuer, industrial loan company, trust company, savings association, 
building and loan or homestead association, credit union, or consumer finance institution, 
located in any state, territory, or the District of Columbia. See 12 U.S.C. $ 340 L {Note: 
The scope of the RFPA*s definition of financial institution for this purpose, which limits 
the restrictions the REP A places on federal law enforcement in using an administrative 
subpoena, is narrower than the definition offinancial institution that is used in connection 
w ith NSLs. For that purpose, the RFPA refers to the broader definition found in the Bank 
Secrecy Act (USA). Among the entities included in the BSA definition are money 
transmitting businesses, car dealers, travel agencies, and persons involved in real estate 
dosings. See 12 U S.C & 34 14( d) and 3 1 U.S.C. § 5312 (a)(2) and (c)(l ).) When seeking 
financial records from a financial institution, the FBI must send a certificate of 
compliance required by 12 U.S.C. § 3403 to the financial institution. The certificate must 
indicate, among other things, that notice has been provided by the FBI to the individual 
customer whose financial records are to be obtained. The content of the notice is set out 
in 12 U.S.C. § 3405 A court order may be obtained that allows for delayed notice 
pursuant to 12 U.S.C. § 3409. Notice is not required if the administrative subpoena is 
issued to obtain the financial records of a corporation or for records not pertaining to a 
customer. Notice is also not required if the administrative subpoena seeks only basic 
account information, defined as name, address, type of account, and account number. See 
1 2 U.S.C. § 34 1 3[g). 
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IS. 6. 4. 3. 4. 1. 2 (U) Ob TAILING RECORDS E BOM A CREDi T Kb BE A i 

(U/ypQUO) A credit bureau or consumer reporting agency may only provide name* 
address, former addresses, place of employment and former place of employment in 
response to an administrative subpoena. See 15 U.S.C. § 1681 f. A credit bureau or 
consumer reporting agency may not release financial information in a credit report or 
consumer report, or the names and locations of financial institutions at which the 
consumer has accounts pursuant to an administrative subpoena. A court order, a grand 
jury subpoena, or, in an appropriate investigation, a national security letter may be used 
to obtain this information. 1 5 U.S.C. § 1 68 lb. Notice of disclosure will be provided by 
the credit bureau or consumer reporting agency to the consumer if the consumer requests 
this information, 

13.6.4.3.4.2 (II) Electronic Communication privacy act 

( U//FGUO) The ability to gather subscriber information and the content of electronic 
communications using an administrative subpoena is governed by ECPA. In 
in vestigations involving the sexual exploitation or abuse of children, only basic 
subscriber or customer information may be obtained with an administrative subpoena 
under the terms of the Attorney General's delegation, as described above. No content 
information may be obtained. In drug and health care fraud investigations, an 
administrative subpoena may be used to obtain basic subscriber or customer information 
and certain stored communications, under limited circumstances, from entities that 
provide electronic communication services to the public. 

15.6.4.3.4.2.1 (U) Scope 

{UtfFOUO) ECPA applies to two types of entities that provide electronic 
communications to the public. They are: 

A} "Electronic Communication Service" is defined as "any service that provides the user thereof 
the ability to send or receive wilt or electronic communications." 18 U.S.C. § 251 Of 15) 

B) ‘"Remote Computing Service” is defined as the ""provision to the public of computer storage or 
processing service by means of an electronic communication system." 1 8 U.S.C. § 27 1 1( 12) 

18.6. 4.3.4. 2.2 (U) St BSCMBEB IS FORMA rtQS 

(U//FGUO) The following information is available through administrative subpoena from 
entities that provide electronic communications to the public in the three categories of 
investigation described in DJGG Section 18,6,4,1.4,2, above: 

A) (UWFCHJG) customer or subscriber name: 

B) (U//FOUO) address: 

C) (U//FOUO) local and long distance connection records or records of sessions, times, and 
duration: 

D} (U^/FOUO) length of service (including start dale) and types of service used: 
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E) (L7/FOEJO) telephone or instrument number or other subscriber number or identity, including 
any temporarily assigned network address (this includes IP addresses |; and 

F } (U//FOUO) means and source of payment for such service (including any credit card or bank 
account number). 

(U//FOUO) Notice to the subscriber or customer is not required. The FFMG35 provides 
an attachment to explain these terms 

18. 6.43. 4.23 (V) SECOSD GENERA nos connection records 

(U//FOUO) An administrative subpoena addressed to a provider of electronic 
communication services may not be used to simultaneously obtain "second generation 
connection records* 1 along with the primary connection records. Second generation 
connection records are the connection records of the telephone or cell phone numbers 
called or received by the "seed* 1 number — the primary' number for which connection 
records are sought. These second generation records may also be referred to as a 
“community of interest' 1 or "a calling circle based on a two-generation community of 
interest.** In order to obtain second generation connection records, a separate 
administrative subpoena must be issued after receipt of the fust set of connect ion records. 
This second subpoena may only be issued if these additional connection records are 
relevant or material to the investigation. Subscriber identification information, if relevant, 
for the phone numbers may also be obtained using another subpoena. 

/ 8. 6.43. 4. 2. 4 (U) Records or o tder informa tios pertaisisg to a subscriber 

(U//FOUO) This is a larger category of information that includes any other records held 
by a service provider such as web surfing logs, buddy lists, cell-site data, and e-mail 
addresses in an address book. This information is not available through an administrative 
subpoena. 

18.6. 4, 3.4.2. J (Uj COS TEST 

(U//FOUO) Content is the actual substance of files stored in an account, including the 
subject line of an e-mail. 

A) (U) Unopened e-mail held in storage for ISO days or less may not be obtained using an 
administrative subpoena. A search warrant is required. 

B) (U) Unopened e-mail that has been held in electronic storage for more than 1 80 days may be 
obtained with an administrative subpoena. (In ihe Ninth Circuit, the opened e-mail and un- 
opened e-mail must have been in storage for I £0 days before it can be obtained with an 
administrative subpoena. See Theofel y, Farey- Jones, 359 F.3d 1066.) The government must 
provide notice to the subscriber or customer prior to obtaining such content. A limited 
exception to the notice requirement is provided in 18 U.S.C. tjj 2705. 

C) (U) E-mail that has been opened and the content of other electronically stored files held in 
storage by an entity that provides storage services to the public (i.c., a remote computing 
service, as defined in I S U.S.C. §2711), may be obtained using an administrative subpoena 
with notice to the customer or subscriber, unless notice is delayed in accordance with 18 
U.S.C. § 2705. 
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D) (LI) E-mail that has been opened and the cement of other electronically shared files held in 
storage by an entity that does not provide electronic communication services to the public, 
such as that on the internal network of a business, may be obtained using an administrative 
subpoena. Notice to the individual is not required because this demand is not restricted by 
EC PA. 

(U) The FD-IG35 administrative subpoena is not configured to obtain e-mail content 
because of developing case law in this area. This information may be obtain using an 
order issued under IS U.S.C. § 2703(d), See DlQG Section 18.6,8.3.13. 

1 8.6.4 .3.4.3 (U) Members OP THE News Media 

(U//FGUO) Approval Requirements: An administrative subpoena directed to a provider 
of electronic communication services or any other entity seeking to obtain local and tong 
distance connection records, or records of session times of calls, made by a member of 
the news media may only be issued w ith the specific approval of the Attorney General. 
Before proposing such a subpoena, an agent should review 28C.F.R. § 50,10, Requests 
for AG approval must be made by the AUSA involved in the investigation consistent 
w ith the DOJ policies set forth in 28 C.F.R. § 50.10. Guidance on the DOJ policy may be 
obtained from the Investigative Law Unit and/or the Privacy and Civil Liberties Unit, 
OGC. 

1 8. 6.4.3. 5 (U) Complia nce/Monitoring 

I 8.6.4.3.5. L ( L > Li m ITS ON USE 

(U//FOUO) An administrative subpoena may only be issued for records that are relevant 
to investigations of controlled substances violations, sexual exploitation or abuse of 
children, or health care fraud. In health care fraud investigations, signature authority lies 
with DOJ. Administrative subpoenas may not be issued under any circumstance other 
than in support of the aforementioned investigations. Documents or records received as a 
result of the service of an administrative subpoena are not Rule 6(e) material and do not 
need to be handled like the information obtained by a FGJ Subpoena, 

1 8.6.4 .3.5.2 ( U ) G v ekfrooliction 

(U//FOUO) If any of the information that is obtained with an administrative subpoena is 
subject to statutory privacy protections (e.g.* records subject to the Electronic 
Communications Privacy Act (EC PA}, Right to Financial Privacy Act (RFPA), the Fair 
Credit Reporting Act (FCRA), Health Insurance Portability and Accountability Act 
(HIPAAh or the Buckley Amendment), it must be reviewed at the time it is received by 
the employee who requested the issuance of an administrative subpoena to ensure that the 
information received from the third party provider is within the scope of the request. Any 
information received from a third party provider that is beyond the scope of the 
administrative subpoena and is subject to statutory protections must be treated as an 
overproduction. If it is determined that the overproduced material is subject to statutory 
protection, then the all of the produced material must be sequestered with the employee's 
supervisor and may not be unloaded into any FBI database or used in the investigation 
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up til one the following methods of disposition have been completed at the discretion of 
the field office or FBI HQ division that issued the administrative subpoena: 

A) (U) The employee redacts the overproduced material. The employee's supervisor must 
approve the scope of the redaction. IT there is any question whether the information provided 
is within the scope of the administrative subpoena, the CDC orOGC must be consulted. The 
method of redaction is left to the discretion of the employee, but redacted information must 
not be visible, used in the investigation, or uploaded into any FBI database. The method of 
redaction will vary depending on whelherthe information was provided in hardcopy or 
electronically. After the overproduced information has been redacted, the remainder of 
properly produced information may be uploaded into any database and used in the 
investigation; 

B) ( U ) Another administrative subpoena has been served to address the overproduction. The Held 
office or HQ division may serve a ^curative" administrative subpoena if: (i) the investigation 
is still pending; (ii) the overproduced information is relevant to the investigation; and(iii) the 
FBI may lawfully obtain the overproduced information under statutory authority {Le.,, the 
ECPA, RFPA t etc ). After the ’^curative" administrative subpoena has been served, the FBI 
may immediately upload and use the sequestered information: 

C) (U) The records are returned to the entity that produced them; or 

D) |U) The records arc destroyed. 

(U) Whichever disposition is selected for the overproduction, iL must be documented in 
the investigative subfile for administrative subpoenas. 

(U) Any questions concerning this process, including the review or disposition of the 
responsive records, or the statutes which cover such records, should be discussed with the 
CDC or QGC. 

1 8.6.4. 3.5.3 ( Lf) Factors for com pu an ce 

(LJ//FOUO) The following factors should be considered to ensure compliance with 
applicable law s and regulations that govern the FBI s use of admin islrative subpoenas; 

A) {L7/FQUO) The administrative subpoena must relate to a type of investigation for which the 
subpoena is authorized; 

B) f L7/FOUO) The administrative subpoena must be directed to a recipient to whom an 
administrative subpoena is authorized; 

C) {L7/FQUO) The administrative subpoena may request only records that are authorized under 
the pertinent taw; 

D) {L7/FOUG) The administrative subpoena must be approved by an authorized official; 

E) (L7/FQUO) The administrative subpoena must be uploaded into the ACS system to the 
Subpoena (“'SSP") subfile of the investigation For record purposes; 

F) (L7/FOUO) The return of service information must be completed on the back of the original 
administrative subpoena; 

G) (L7/FOUO) The original administrative subpoena and completed return of service must be 
maintained in a "SBP 1 * subfile of the investigation; and 
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H) (U//FOUO) Ef the records provided in response to the administrative subpoena are subject to 
statutory privacy protections, they must be reviewed to ensure that they are within the scope i 
the request (i.e., that there is no overproduction). If an over-production has occurred, the 
procedures outlined above must be followed. 
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18,6,5 (If) In vest iga rt ve Method: Grand Jur y Subpoenas { compulsor y 

process) 

1 8.6. 5.1 (U ) Overview of Compulsory Process 

(U//FOUG) Compulsory processes may be used to compel the disclosure of records and other 
information relevant to an authorized investigation; in addition, in a Type 1 & 1 Assessment 
grand jury subpoenas may be used to obtain telephone or electronic mail subscriber 
information. Compulsory process in a Predicated Investigation includes, but is not limited to* 
the use of grand jury subpoenas {as described in this section below and in DIOG Section 
18.5.9); administrative subpoenas (DIOG Section J8.6.4); trial subpoenas requested by the 
prosecuting attorney and issued by the trial judge; National Security Letters (NSL) ( DIOG 
Section IS. 6.6); and FISA Orders for business records (DIOG Section 1 8.6.7). Compulsory 
process is used to gather information in furtherance of FBI investigations. The FBI's authority 
to use such compulsory process is based upon Executive Branch delegated authorizations* 
statutes* regulations and the FRCP. 

(U) An FBI CHS cannot be tasked to obtain records protected by the RFPA, FCRA* ECPA. 
Buckley Amendment, except as specifically authorized by such law. 

18.6.5.2 (U) Application 

(U//FOUO) Grand jury subpoenas may be used during Predicated Investigations. This 
investigative method may not be used for assistance to other agencies, unless the assistance 
provided is also relevant to an already open FBI Predicated Investigation. A grand jury 
subpoena for telephone and electronic mail subscriber information only may be used in a 
Type 1 & 2 Assessment. A grand jury subpoena may not be used for the collection of positive 
foreign intelligence. 

18.6.5.3 (U) Federal Grand Jury Subpoena 

18,6.5.3.1 (U) Legal Authorities 

(U) A Federal Grand Jury (FGJ) is an independent panel charged with determining whether 
there is probable cause to believe one or more persons committed a particular federal offense. 
If the FGJ believes probable cause exists* it will vote a “true bill" and the person w ill be 
indicted. An indictment is the most typical way a person is charged with a felony in federal 
court A FGJ can collect evidence through the use of an FGJ subpoena* which is governed by 
Rule 6 of the FRCP. FRCP 6(e) controls the release of information obtained as part of the FGJ 
proceeding, FRCP 6(e) allows federal prosecutors to sham foreign intelligence* 
counterintelligence, and terrorism-related threat information, and it is the DOJ*s policy that 
such information should be shared to the fullest extent permissible by law and in a manner 
consistent w ith the rule. The Attorney General has issued revised Guidelines for the 
Disclosure and Use of Grand Jury Information under Rule 6(e)(3 HD) (hereinafter “FGJ - 
Guidelines"). A memorandum issued by the Deputy Attorney General on May 15. 2008, 
provides amplifying guidance. 
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18.6.5.3.2 (V) Scope 

(LWFOUO) FGJ subpoenas can be used to demand documents, records, testimony of 
witnesses, or any other evidence deemed re Levant by a sitting grand jury. The FBI can request 
the issuance of an FGJ subpoena in coordination with the responsible US AO in all criminal 
investigative matters. In Type I &. 2 Assessments* telephone and electronic mail subscriber 
information may be requested through the use of an FGJ subpoena. An agent requesting a 
grand jury subpoena during an Assessment must advise the A USA, who wilt issue the 
subpoena* that the FBI is conducting an Assessment. The AUSA must determine whether 
there is sufficient connection between the Assessment and possible criminal conduct to 
w arrant issuance of a FGJ subpoena, FG J subpoenas may not be sought during Type 3 f 4, 5, 
or 6 Assessments. An FGJ subpoena may not be used in a positive foreign intelligence 
investigation. FGJ subpoenas are part of the investigative process. Thus, w-hen an individual i> 
indicted, further FGJ subpoenas may not be issued that are related to those offenses. 

Additional subpoenas pertaining to this individual could be issued, however* for any crimes 
that continue to be investigated and have not yet been indicted, FGJ subpoenas cannot be used 
to gather evidence for trial; trial subpoenas must be used for that purpose {see Rule 17 Federal 
Rules of Criminal Procedure), 

1 8. 6. 5.3.3 (U) A PFROVAL REQUIREMENTS 

{U) There are no FBI supervisory approval requirements, but all FGJ subpoenas must be 
issued by the US AG that is handling the Type I & 2 Assessment or Predicated Investigation 
to w hich the subpoenaed materials or witnesses are relevant. 

18.6.5.3 A (U) Dura tion of A pprova L 

(U) FGJ subpoenas include a "return date.' 1 which is the date on which the subpoenaed 
materials or testimony is due to the grand jury. 

1 8. 6. 5. 3. 5 (U) Specific Procedures 

(U) FGJ subpoenas are governed by Rule 6(e) of the Federal Rules of Criminal Procedure and 
can only be obtained in coordination with the responsible US AG or the appropriate DOJ 
division. 

IJL6.5.3.5.I (U) MEMBERS OP THE NEWS MEDIA 

(U) Approval Resairemenn: A grand jury subpoena directed to a provider of electronic 
communication services or any other entity seeking to obtain local and Long distance 
connection records, or records of session times of calls, made by a member of the news media 
may only be issued with the specific approval of the Attorney General. Before proposing such 
a subpoena, an agent should review 2SC.FJL § SO. 1 0. Requests for AG approval must be 
made by the AUSA involved in the investigation consistent with the DOJ policies set forth in 
28 C.F.R. § 50.10. Guidance on the DOJ policy maybe obtained from the Investigative Law 
Unit and/or the Privacy and Civil Liberties Unit, GGC. 
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1 5. 6. 5.3. 6 (U) Noticeand Reporting Requirements 

{U) Theme is no FBI notice or reporting requirements for FGJ subpoenas. 

1 8. 6.5.3. 7 (UJ Grand Jury Proceedings— Genera ll y 

18.6.5.3.7.1 (U) PROCEDURAL ISSLES AND HANDLING OF FGJ MATERIALS 

(U) The FGJ makes its deiermi nation whether to return a “true bill of indictment 7 ’ based 
on evidence presented by the prosecuting attorney in an ex parte proceeding. The grand 
jury operates under the direction and guidance of the United States District Court. 
Generally, only witnesses for the prosecution testify before the grand jury . 

(U) Only the United States Attorney or an assistant, other DOJ attorneys prosecuting the 
matter, the witness under examination, an interpreter (as needed), and the stenographer or 
operator of a recording device may be present while the grand jury is in session. No judge 
is present during the presentation of evidence although the court will sometime rule on 
evidentiary issues and will provide initial instructions to the FGJ. No person other than 
the grand jurors may be present while the grand jury is deliberating or voting. 

HL6.5.3.7.2 ( U) Rest rictions on Di sclo&u re 

(U) As a general rule, no one other than a grand jury w itness may disclose matters 
occurring before the grand jury. Government agents, even if called as witnesses, may not 
disclose matters occurring before the grand jury. 

1&6.5J.7.3 (U) exceptions Permitting Disclosure 

1 8. 6. 5.3. 7.3 . i (V) DtSCLOStRES 8 Y THE GOTERNMEN f WtTHOVT THE COLR T 'S 

PERMISSION 

(U//FOUO) The government, through its attorney, may disclose grand jury matters under 
the follow ing conditions: 

A) (U) Under Rule 6(eX3.M A), the government may disclose a grand jury matter to certain 
persons in certain situations provided the government does not disclose the grand jury's 
deliberations or any grand juror's vote and the government provides the court that impaneled 
the grand, jury wi th the names of all persons to whom disclosure was made and certifies that 
the government has advised l he receiving party of the obligation of secrecy under this rule. 

B) (U) Persons eligible to receive material under this subsection are: I ) an attorney for the 
government for use in performing that attorney's duty: 2) any government personnel, including 
slate, local, tribal, or foreign government personnel that an attorney for the government 
considers necessary to assist in performing that attorney's duty to enforce federal taw: and 3) a 
person authorized under IS U.S.C. § 3322. 

C) (U) For these purposes, OGC attorneys and CDCs are not ^attorneys for the government." For 
purposes of the Rules of Criminal Procedure, FRCP I defines -'attorney for the government" 
as ~the Attorney General, an authorized assistant of the Attorney General, a United States 
Attorney, (and] an authorized assistant of the United States Attorney " 
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D)fU| An attorney for the government may disclose any grand jury matter to another FGJ. 

E| (U) An attorney for the government may disclose any grand jury matter involving foreign 
intelligence, counter! nte I tigence, or foreign intelligence information to any federal law 
enforcement, intelligence, protective, immigration, national defense, or national security 
official to assist the official receiving the information in the performance of that official's 
duties. The government attorney must file, under seal, with the court that impaneled the grand 
jury, a notice that such information was disclosed and the agencies or departments that 
received the information. As used in Rule Gfe), foreign intelligence information is information 
that relates to the ability of the United Slates to protect against actual or potential attack or 
grave hostile acts by a foreign power or its agents; sabotage or international terrorism by a 
foreign power or its agents or clandestine intelligence activities by an intelligence service or 
network of a foreign power or its agents: -or information with respect to a foreign power or 
foreign territory Lhat relates to the national defense or security of the United States or the 
United States conduct of foreign affairs. 

F) (U) An attorney for the government may disclose any grand jury matter involving, either in 
the United States or elsewhere, a threat of attack or other grave hostile acts of a foreign power 
or its agent, a threat of domestic or international sabotage, or clandestine intelligence 
gathering activities by an intelligence service or network of a foreign power or by its agent to 
any appropriate federal, state, local, tribal, or foreign government official for the purpose of 
preventing or responding to such threat or activities. The government attorney must file, under 
seal, with the court that impaneled the grand jury, a notice that such information was disclosed 
and the agencies or departments that received the information. 

/ 8. 6. S3. 73.2 Disclosures sr the go i ernmest requiring the Court's 

PERMISSION 

(U//FOUOJ The government, through its attorney* may disclose grand jury mailers under 
the follow ing conditions only with permission of the court. Petitions to make these 
disclosures are generally* but not always, filed with the court that impaneled Lhc grand 
jury. Unless the hearing on the government's petition is to be ex parte, the petition must 
be served on all parties to the proceedings and the parties must be afforded a reasonable 
period of lime to respond 

A ) (U) An attorney for the government may petition for disclosure to a foreign court or 
prosecutor for use in an official criminal investigation. 

B) (U) An attorney for the government may petition For disclosure to a slate, local, tribal, or 
foreign government official, if the government attorney can show that the matter may disclose 
a violation of state, tribal, or foreign criminal law, and the purpose of the disclosure is to 
enforce that law. 

C) (LJ) An attorney for the government may petition for disclosure to an appropriate military 
official if the government attorney can show the matter may disclose a violation of military 
criminal law under the Uniform Code of Military Justice, and the purpose of the disclosure is 
to enforce that law. 

/ A 6.53. 73. J (tj) FBI T J CONDUIT RULE 

(U//FOUO) Only the federal prosecutor is authorised to make an initial disclosure of 
Rule 6<eM3MDl foreign intelligence information. As a practical matter* such disclosures 
are ordinarily accomplished through the FBI, w hich may have existing information- 
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sharing mechanisms with authorized receiving officials. If the prosecutor i mends to share 
information directly with another official, consultation with the FBI is required to ensure 
that disclosures will be consistent with the existing policy of intelligence community 
agencies and to ensure appropriate handling of sensitive or classified information. 
Disclosures to foreign officials should ordinarily be accomplished through the FBI, but 
there may be instances when sensitive information would be better protected in a foreign 
country if disclosure occurs through another intelligence agency, 

(LWFOUO) If, in cases of emergency, the prosecutor must disclose information before 
consulting with the FB1 1 the prosecutor must notify the FBI as soon as practicable, 

IS. 6 . 5 . 3 . 7 J .4 (U) Other L/AirrA nows 

(U) Rule 6(e}pRD) does not eliminate certain other information protection requirements* 
such as restrictions on disclosure of tax returns and tax information, on certain financial 
information under the Right to Financial Privacy Act* and on classified information, to 
name only a few examples. Specific statutes may impose additional burdens of 
disclosures. 

1 8. 6.5 J. 7.4 (U) Disclosure 

A } (U) An FBI employee may become a "receiving official," i.e,,the person to whom grand jury 
information can be disclosed, if the FBI receives grand jury information developed during 
investigations conducted by other agencies. A receiving official is any federal, state, local, 
tribal, or foreign government official receiving grand jury information, disclosed by an 
attorney for the government, under any provision of Rule 6feX3MD>- A receiving official may 
only use the disclosed material as necessary in the conduct of hi s/her official duties. The 
receiving official ordinarily must consult with the federal prosecutor before disseminating the 
information publicly, including in open court proceedings. 

B) (U//FOUO) Receiving officials may only use grand jury information in a manner consistent 
with FGJ Guidelines and any additional conditions placed on the use or handling of grand jury 
information by the attorney for the government, 

C) (LV/FOUO) If dissemination is necessary to the performance of his or her official duties, a 
receiving official may disseminate Rule 6(e)(3)(D) information outside of that official's 
agency to other government officials. 

D) (U) A receiving official, other than a foreign government official, must consult with the 
attorney for the government before disseminating Rule 6<eX3HD) information publicly 
(including through its use in a court proceeding that isopen to or accessible to the public), 
unless prior dissemination is necessary to prevent harm to life or property. In such instances, 
the receiving official shall notify the attorney for the government of the dissemination as soon 
as practicable. 

E) (U) A foreign government receiving official must obtain prior consent from the disclosing 
official where possible, or if the disclosing official is unavailable, from the agency that 
disseminated the information to that foreign official before dissemination of the information to 
a third government or publicly. Public dissemination includes using the information in a court 
proceeding that is open to or accessible by the public. 
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F) (U) A receiving official shall handle Rule 6(eX3H Dim formation in a manner consistent with 
its sensitivity and shall take appropriate measures to restrict access to this information to 
individuals who require access for the performance of official duties. 

G) (U) A receiving official shall immediately report to the disclosing attorney for the 
government: any unauthorized dissemination of Rule 6{e)(3HD> information; or any loss, 
compromise, or suspected compromise of Rule 6(e)(3}(D) information. 

IS. 6. 5.3. 7. 4. 1 W) Viola nows 

AHUJ A receiving official who knowingly violates Rule 6(e)(3XD) by using the disclosed 
information outside the conduct of his or her official duties, or by failing to adhere to any 
limitations on the dissemination of such information, may be subject to contempt of court 
proceedings and to restriction on future receipt of Rule 6(eX3HD) information. 

B) (LI) A state, local, tribal, or foreign government official who receives Rule 6(eK3)(Dj 
information, and who knowingly violates these guidelines, may be subject to contempt of 
court proceedings. 

C) (U) An attorney for the government who knowingly violates Rule 6|eX3)(D.) may be subject 
to contempt of court proceedings, 

1 8. 6*5.3. 7. 4. 2 (U) L IMfTA TlOW OW Una U THOR iZLD DfSCLQSIfEES 

(Uj Rule &fe)pXD)(i) provides that receiving officials may use disclosed informal ion 
only lo conduct their “official duties subject to any limitation on the unauthorized 
disclosure of such information/’ This “limitation on unauthorized disclosures^ is 
understood lo encompass applicable statutory, regulatory, and guideline restrictions 
regarding classification, privacy „ or other information protection, as well as any 
additional restrictions imposed by the federal prosecutor, 

(U//FOUG) The FGJ Guidelines do not require the receiving official to notify lire federal 
prosecutor of subsequent disclosures, except for consultation concerning public 
disclosures and consent for certain disclosures by foreign officials. The receiving official 
is bound by whatever restrict ions govern his or her use and disclosure of the information 
as part of his official duties. (Memo dated 5/1 5/Oft, Guidelines for the Disclosure and Use 
ofKGJ Information under Rule 6feir3j[Dlf 

IS. 6. 5*3. 7.4.3 (U) L iMt ta now OF USE 

AHUtfFOUG) Because of the restrict ions involved in handling information that is obtained by 
the use of a gjand jury subpoena, whenever possible, alternatives lo the grand jury subpoena, 
such as administrative subpoenas, search warrants and witness interviews should be 
considered as an alternative method of obtaining evidence. 

B) (U) A grand Jury subpoena may only be used for purposes of gathering information that is 
relevant to the grand jury's investigation. Grand jury secrecy continues indefinitely, regardless 
of whether there is an indictment, unless the material becomes a matter of public record, such 
as by being introduced at trial. 

C> | U) Rule bfeXTKD) does not require notice to the court of subsequent dissemination of the 
information by receiving officials. 
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DHU//FOUO) Disclosure of grand jury material cannot be made within (he FBI for unrelated 
investigations! unless a government attorney has determined that such disclosure to a particular 
investigator is needed to assist that attorney in a specific criminal investigation. The ability of 
government attorneys to freely share grand jury material with other government attorneys for 
related or unrelated criminal investigations does not extend to investigators without 
investigation specific authorisation from the government attorney and notice to the court. 
Therefore, grand jury material must be restricted when placed info a general system of 
records that is freely accessible to FBI employees and others with access (e.g., ACS). 

E) (U//FOUO) If a government attorney authorizes the disclosure of grand jury material in the 
possession of the FBI for use in an unrelated federal criminal matter, such approval must be 
documented in the pand jury subfile of both the initiated investigation file and the subsequent 
investigation file. That documentation will be in addition to any necessary supplementation to 
the government attorney's FRCP Rule 6(e) disclosure lelter and/or to the internal disclosure 
list. 

F) (U//FOUO)The USAO should be consulted immediately for precautionary instructions if 
grand jury material will have application to civil law enforcement functions (e g., civil RJCO 
or civil forfeiture). There are very limited exceptions that allow government attorneys to use 
grand jury material or information in civil matters (e g , civil penalty proceedings concerning 
hanking law violations). These exceptions do not automatically apply to investigative 
personnel. Therefore, any similar use of grand jury information by the FBI must be approved 
in advance by the government attorney. 

G) (U//FOLFO) Disclosure cannot be made without a court order for use in non-criminal 
investigations, such as background investigations or name checks. 

H) (U/fFGUG) Government personnel who are preparing a response to a Freedom of Information 
Act or Privacy Act request may properly access grand jury material under the Rule because 
they are considered to be assisting the grand jury attorney by ensuring against any improper 
disclosure, 

/& 6. SJ. 7 4 A (V) MA TTERS OCCURRING BEFORE THE GRAND Jt R Y 

A) I U) Core Grand Jury Material: There can be no dissemination of matters occurring before the 
grand jury unless such dissemination comes within one of the exceptions discussed above. 
There is no uniform legal definition of what constitutes matters occurring before the grand 
jury except for what is generally referred lo as "core" grand jury material. ‘“Core grand jury 
material" includes the following: (i) names of targets and witnesses; (ii) grand jury testimony; 
(in} grand jury subpoenas; (iv) documents with references to grand jury testimony (including 
summaries and analyses); (v) documents that clearly reveal the intentions or direction of the 
grand jury investigation; and (vi} other material that reveals the strategy, direction, testimony, 
or other proceedings of a grand jury. 

B) (LI) Documents Created Independent of Grand Jury but Obtained by Grand Jury Subpoena: 
Rule 6<e) generally prohibits disclosing J matters occurring before Lhe grand jury." The rule, 
however, does not defi ne that phrase. The issue of whether pre-existing documents fail w ithin 
that prohibition has never been settled conclusively by the Supreme Court, although many 
lower courts have discussed it at length. Courts generally agree that this prohibition does not 
coverall information developed in the course of □ grand jury investigation: rather, the secrecy 
rule applies only to information that would reveal the existence, strategy or direction of the 
grand jury investigation, the nature of the evidence produced before the grand jury, the views 
expressed by members of the grand jury, or anything else that actually occurred before the 
grand jury. In addition, courts, have frequently held that Rule 6(e) does not protect documents 
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subpoenaed by the government from third parlies only for ihe informs lion contained within 
the document rather than to determine the direction or strategy of the grand jury investigation. 
Due to developing law on this issue. FBI personnel should consult with the AUSA 
responsible, or the CDC/OGC to determine how best lo handle such documents. 

C) (U//F0UO) Para Extracted from Records Obtained In 1 Grand Jurr Subpoena: Information 
extracted from business records that were obtained by grand jury subpoena is often used to 
facilitate investigations. Some of that type of data is, by statute or ease law, subject lo grand 
jury secrecy rules. In other investigations, determination of whether data must be considered 
subject to grand jury secrecy rules depends on the case law and local practice in the federal 
district. Information extracted from grand jury subpoenaed financial records subject lo the 
Right to Financial Privacy Act of 1 978 ( 1 2 U.S.C. § 3420) must be treated as grand jury 
material “unless such record has been used in the prosecution of a crime for which the grand 
jury issued an indictment or presentment or for a purpose aut horized bv rule 6( e t of the 
Federal Rules of Criminal Procedure." I, emphasis added). Rule tifeX3XB) authorizes grand 
jury material to be used "lo assist an attorney for the government in performing that attorney's 
duly to enforce federal criminal Eaw. H Use of information obtained through a grand jury 
subpoena by FBI employees to advance an investigation does not constitute a disclosure of 
grand jury information in violation of Rule 6(e). With the approval of the USAO. information 
from subpoenaed telephone records may be disclosed for use in unrelated federal criminal 
investigations in those districts where such material is not considered a “matter occurring 
before a grand jury.'" If the USAO approves generally of this procedure, such information may 
be used in unrelated criminal investigations without authorization from a government attorney 
in each instance. 

IS. 6. 5.1 ?. 4. 5 (U) Federal GkA\t> Jtk v Physical E i idesce and Sta tements or 

WETNESSES 

A) (U) Physical evidence provided to the government in response to a grand jury subpoena is 
subject to Ihe secrecy rule regardless of whether such evidence is presented to the grand jury. 
Physical evidence provided voluntarily or obtained by means other than grand jury process 
(such as by consent or a search warrant) is not a grand jury matter regardless of whether such 
evidence was previously or is thereafter presented to the grand jury. The fact that tire physical 
evidence was presented to the grand jury is, however, subject lo the grand jury secrecy rules. 

B) (U) Statements of witnesses obtained as a result of grand jury process Including grand jury 
subpoena, such as a statement given in lieu of grand jury testimony, are matters occurring 
before the grand jury irrespective of whether such witnesses testified before the grand jury or 
are not required to testify. Voluntary statements of witnesses made outside of the grand jury 
context (not pursuant to any grand jury process including a grand jury subpoena), including 
statements made outside the grand jury by a witness who is being prepared for grand jury 
testimony, are not grand jury matters irrespective of whether the witness previously testified 
or will thereafter testify before the grand jury. 

C) (U) Rule 6(e)(3)(B) requires a federal prosecutor who discloses grand jury material lo 
government investigators and other persons supporting the grand jury investigation to 
promptly provide the court that impaneled the grand jury the names of Lhe persons to whom 
such disclosure has been made and to certify that he/she has advised such persons of their 
obligation of secrecy under the Rule. In order to document the certification required by the 
Rule, government attorneys often execute and deliver to the court a form, normally referred to 
as a “Certification" or "Rule 6(e) letter." A copy of this document should be maintained with 
the grand jury material held in the FBI's custody. 
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D) tUflFOUQ) Documentation o( interna! Disclosures o^Crand Jury Material: Grand jury 
material should be kept in such as fashion as to maintain the integrity of the evidence. Upon 
taking custody of grand jury material:, the FBI employee should categorize it in a manner to 
identify its production source and how it was obtained, to include the identity of a custodian of 
record for documentary evidence. Practical considerations often require agents assisting 
government attorneys to seek assistance in the same investigation from others within the FBI. 
En many districts, support personnel and supervisors of case agents need not be routinely 
included in the list provided to the court. In lieu of a Rule 6(e) letter from the USAO 
containing an exhaustive list of names of FBI personnel, an FBI record of additional internal 
disclosures must be maintained by the case agent in order to establish accountability. Use of 
this 'Internal certification' 4 procedure should be authorized by the appropriate USAO. The 
internal form must record the date of disclosure as well as the identity and position of the 
recipient. Such internal disclosures may be made only in support of the same investigation in 
which a federal prosecutor has previously issued a Rule 6(e) letter. In addition, the internal 
record must reflect that all recipients of grand jury materials were advised of the secrecy 
requirements of Rule 6(e). '^'henever practicable, recipients should be listed on this internal 
certification prior to disclosure. Local Rule 6(e) customs should govern the internal 
certification process used. 

E) (U//FGUG) Storage of Grand Jun Materia/: The FBI cannot make or allow unauthorized 
disclosure of grand jury materiaL. Material and records obtained pursuant to the grand jury 
process are frequently stored in FBI space. FBI personnel should report any unauthorized 
disclosure to the appropriate government attorney who. in turn, must notify the court. In order 
to protect against unauthorized disclosure, grand jury material must be secured in the 
following manner: 

1 ) (U//FQUO) The cover, envelope, or container containing grand jury materials must be 
marked with the warning: “GRAND JURY MATERIAL - DISSEMINATE ONLY 
PURSUANT TO RULE 6(e)." No grand jury stamp or mark should be affixed to the 
original material. Agents, analysts and other authorized parties should work from copies of 
grand jury material whenever possible to ensure the original material retains its integrity. 

2) (Uy/FOLJO) Access to grand jury material must be limited to authorized persons (e.g. T 
those assisting an attorney for the government in a specific criminal investigation). All 
necessary precautions should be taken to protect grand jury material, to include 
maintaining the material in a secure location when not in use. The materiaL must be 
appropriately segregated, secured, safeguarded and placed in the investigative subfile for 
FGJ material. Absent chain-of-custody considerations, grand jury material may be 
maintained in the LA section of the file. Grand jury material need not be kept in an 
evidence or bulky exhibit room and may be entrusted to a support services technician 
(SST) or evidence control technician (ECT). Should grand jury material be entered into a 
computer database, the data must be marked with the 6(e) warning and restricted within the 
system. 

3) (U//FOUO) Registered mail or other traceable courier (such as Federal Express) approved 
by the Chief Security Officer (CSO) must be used to mail or transmit to other field offices 
any documents containing grand jury material. Couriers and other personnel employed in 
these services wilt not be aware of the contents of the material transmitted because of the 
wrapping procedures specified below, and therefore, then do not require a background 
investigation for this purpose. The names of persons who transport the material need not be 
placed on a disclosure list, but the receiving office must provide the case agent in the 
originating office with the names of personnel in the receiving office to whom disclosure is 
made. 
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4J (U//FOUO) Grand jury material that is to be mailed, ortransinitled by traceable courier 
outside a facility must be enclosed in opaque inner and outer covers. The inner cover musl 
be a sealed wrapper or envelope that contains the addresses of the sender and the 
add ressee, who must be authorized lo have access to the grand jury material. The inner 
cover must be conspicuously marked "Grand Jury Information To Be Opened By 
Addressee Only." The outer cover must be sealed, addressed, return addressed, and bear no 
indication that the envelope contains grand jury materia]. When the size, weight, or nature 
of the grand jury material precludes the use of envelopes or standard packaging, the 
materia] used tor packaging or covering must be of sufficient strength and durability to 
protect the information from unauthorized disclosure or accidental exposure. 

5 > ( U//FOUO) If the government attorney determines that the sensit i vity of, or threats to, 
grand jury material necessitates a more secure transmission method, the materia] may be 
transmitted by an express mail service approved for the transmission of national security 
information or be hand carried by the assigned government attorney or his or her 
designated representative. 

6) (U//FOUO) Grand jury material containing classified national security information must 
be handled, processed, and stored according to 28 C.F.R. Pari 17. Grand jury material 
containing other types of sensitive information, such as Federal lax return information, 
witness security information, and other types of highly sensitive information that have 
more stringent security requirements than that usually required for grand jury material 
must be stored and protected pursuant to the security regulations governing such 
information and any special security instructions provided by the organization that 
originated the information. 

7) (U//FOUO) Original documents that are obtained through the grand jury process should be 
returned lo the attorney for the government or, with the government attorney's permission, 
to the owner if there is no indictment or the prosecution has concluded. 

IS. 6. 5. J. 7, 4. 6 W) Requests for Subpoenas is Fvgi n t e Isvestiga nom 

(U//F0U01 The function of the grand jury is to decide whether a person should be 
charged with a federal crime. Locating a person who has been charged is a task that is 
ancillary lo, rather than a pari of, that function. As such, grand jury subpoenas cannot be 
used as an investigative aid in the search fora fugitive in whose testimony the grand jury 
has no interest. Absent one the exceptions discussed below being applicable, grand jury 
subpoenas for testimony or records related a fugitive's w hereabouts may not be requested 
in FBI fugitive investigations. 

(U//FOUO) If the grand jury has a legitimate interest in the testimony ofa fugitive 
regarding an ongoing investigation, it may subpoena other witnesses and records in an 
effort to locale the fugitive. In this situation, the responsible Assistant Attorney General 
must approve a "target'* subpoena for the fugitive before the grand jury may subpoena 
w itnesses and records to locate the fugitive. 

(U//FOUQ) When a fugitive's present location is relevant to an o flense under 
investigation, the grand jury may legitimately inquire as to the fugitive's w hereabouts. 
Offenses such as harboring, misprision ofa felony, and accessory after the fact are 
examples of crimes as to which the fugitive's location may be relevant evidence. If, 
how ever, the person w ho is suspected of harboring the fugitive or being an accessory 
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after the fact has been immunized and compelled to testify regarding the location of the 
fugitive, this will likely be viewed as improper subterfuge. 

(U//FQUG) DOJ policy generally forbids the use of grand jury subpoenas to locale a 
defendant charged in a federal criminal complaint with unlawful flight to avoid 
prosecution (UFAF). UFAP investigations are, as a general rule, not prosecuted. Use of 
the grand jury in the investigation of a UFAP matter requires prior consultation with DOi 
and written authorization to prosecute from the Assistant Attorney General in charge of 
the Criminal Division, Federal indictments for UFAP require prior written approval of 
the Attorney General, Deputy Attorney General, or an Assistant Attorney General 

1 8.6. 5 X 7.5 ( LI ) O VEHPHtJDUC Tl UN 

(U) If any of the information received in response to a FGJ subpoena is subject to 
statutory privacy protections (e g,, records subject to the Electronic Communications 
Privacy Act (ECPA), Right to Financial Privacy Act (RFPA), the Fair Credit Reporting 
Act (FCRA), Health Insurance Portability and Accountability Act (HtPAAj, or the 
Buckley Amendment), it must be reviewed at the time it is received by the employee who 
requested the issuance of the FGJ subpoena to ensure that the information received is 
w ithin the scope of the subpoena's demand. Any information received from a third party 
provider that is beyond the scope of the FGJ subpoena and is subject to statutory 
protections must be treated as an overproduction. Overproduced material must not be 
uploaded into any FBI application database or used in any manner. Instead, the FBI 
employee must promptly notify the AUSA who authorized the issuance of the FGJ 
Subpoena of the potential overproduction. The AUSA, in coordination with the FBI 
employee, must determine w hether the information exceeds the scope of the FGJ 
subpoena, and if so, how to dispose of the overproduced material. Whatever disposition 
of the overproduction is chosen it must be documented in the investigative subfile for 
FGJ subpoenas. 
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18.6.6 (U) In vestiga tive Method : Na tiona l Security Letter (compulsor y 

process) 

1 S.6. 6.1 (U ) O VE RV1EW Of COM PULSOR Y PROCESS 

(UflFOUQ) Compulsory processes may be used to compel the disclosure of records and other 
information relevant to an authorized investigation to protect against international terrorism or 
clandestine intelligence activities. Compulsory process in a Predicated Investigation includes, 
but is not limited to, the use of National Security Letters (NSL) (described below in this 
section); grand jury subpoenas (DIOG Sections 18.6.5 and 18,5.9); administrative subpoenas 
(DIOG Section 18.6,4); trial subpoenas requested by the prosecuting attorney and issued by 
the trial judge; and FISA business records orders (DIOG Section 18.6.7). Compulsory process 
is used to gather information in furtherance of FBI investigations. The FBI's authority to use 
such compulsory process is based upon Executive Branch delegated authorizations, statutes, 
regulations and the FRCP. 

(U) An FBI CHS cannot be tasked to obtain records protected by the RFPA S FCFEA, ECPA, 
Buckley Amendment, except as specifically authorized by such law. 

18. 6.6.2 (U ) APPlI cation 

(U//FOUO) National Security Letters (NSLs) may be used in a national security Predicated 
Investigation. This method may not be used for assistance to other agencies, unless relevant to 
an already open FBI authorized investigation. 

IB. 6.6.3 ( U ) National Security Letters 

1 8. 6. 6.3, 1 (U) Legal Authority 

A) (U) 12 U.S.C. | 3414(b)(5)(A); 

B) (U) I5U.5.C.§§ 168 1 u and I68lv; 

C) (U) 1 8 U.S.C. $ 2709; 

D) (U) 50 USC. § >136; 

E) (U) AGG-Dom, Part V; and 

F) (U) A National Security Letter (NSL) may be used only to request; 

I ) (U) Financial Records: The Right Co Financial Privacy Act ( RFPA) T 1 2 U.S.C, § 

34H(aH5K 

2} (U) Identity of Financial Institutions: Fair Credit Reporting Act [FCRAL 15 U.S.C, § 
I681u(a); 

3) (U) Consumer Identifying Information: FCRA, I5U,S.C. Ij 368!u(b); 

4} (U) Identity of Financial Institutions and Consumer Identifying Information: FCRA, 15 
U.S,C, 168 lu(a) and (b); 

5} (LI) Full Credit Repons in International Terrorism Investigations: FCRA, 15 U.S.C, § 

168 1 v: and 
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6) (U) Telephone Subscriber Information, Toll Billing Records, Electronic Communication 
Subscriber Information, and Electronic Communication Transactional Records; Electronic 
Communications Privacy Act ( EC FA). 1 S USX' § 2709. 

1 ft 6. 6.3.2 (U) Dlfimtiqjv of Method 

(U) A National Security Letter (NSL) is an administrative demand for documents or records 
that are relevant to an authorized investigation to protect against international terrorism or 
clandestine intelligence activities. Sample NSLs are available. NSLs may not be issued in an 
Assessment. 


1 ft 6. 633 (U) Appro va t Requirehehts 

(U.7FOUO) The process for creating an NSL involves two documents; the NSL itself and the 
EC approving the issuance of the NSL, The authority to sign NSLs has been delegated to the 
Deputy Director. Executive Assistant Director, and Associate EAD for the National Security 
Branch; Assistant Directors and all DAPs for CT/CP/Cyber; General Counsel: Deputy 
General Counsel for the National Security Law Branch: Assistant Directors in Charge in NY, 
WFO, and LA; and all SACs. This delegation includes FBI officials properly designated to 
serve in these positions in an acting capacity No other delegations are permitted. The 
following requirements for designating an acting official arc particular to NSLs and are more 
restrictive than the Succession and Delegation Policy set forth in DIOG Section 3: 

A) (U'.'FOUQ) When traveling on official orders outside the geographical limits of the field 
office or division, on leave, or otherwise unavailable to fulfill the duties of their positions: 
ADICs and SACs may designate an immediate subordinate, no Sewer than an ASAC as Acting 
A DIC 0C SAC (respectively); and HQ officials may designate a subordinate no lower than a 
Section Chief as Acting AD or DAD. Such designations must be documented in 3 1 9X-IIQ- 

A 1 565545-XX in which the last two alpha characters designate the office, division, or Legal. 
See D1DG Section 3.4 J .3, 

B) (U//FOUQ) Those designated as acting officials for purposes of signing NSLs must be 
properly trained on NSL policies as set forth in Curporale Policy Notice Q227N, Any 
designation must be made in writing with notice to the supervisory AD1C (if any) or lo the 
Deputy Director. In addition, a hard copy of such standing orders must be forwarded to the 
supervisory AD1C (If any) or to the Deputy Director The designation may be accomplished 
by a record email or EC T expressly stating the date on which the acting official's authority 
becomes effective. All such emails or ECs must be uploaded and maintained in an appropriate 
control file in the office in which the acting official is acting. 

C) (U//FQUQ) ADICs, SACs, and HQ officials may also choose to document by EC a ''standing 
order of succession," which automatically takes effect when they are traveling, absent, or 
unavailable. The EC documenting the standing order of succession must be approved by that 
official, or if unavailable, by the Deputy Director, and uploaded and maintained in the 
appropriate administrative file as set forth in Section 3.4.3. The EC must indicate under what 
circumstances the standing order of succession takes effect, 

(U) Additional details and instructions can be found in Corporate Policy Notice 0227N . 


Vrraknt itowd; 
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(U FOUO) In addition to being signed by a statutorily-required approver, every NSL must be 
reviewed and approved by a CDC, ADC tor attorney acting in that capacity), or an N5I.R 
attorney. 

1 8. 6. 6 . 3 A (V) Standards for Issuing NSLs 

(U) The standard for issuing an NSL. except under 15 U.S.C § IbKlv, is that the material 
sought is relevant to an authorized investigation to protect against international tenon sm or 
clandestine activities, provided that such an investigation of an USPEK is not predicated 
solely on activities protected by the First Amendment of the Constitution of the United States. 
Thus, an NSL may not be issued unless the information sought is relevant to an open and 
authorized Preliminary Investigation (PI) or Full Investigation (Full). NSLs may not be 
issued in an Assessment. (An NSL request for a full credit report is nol available hi 
counterintelligence investigations unless there is an international terrorism nevus. 15 
LLS.C. § 1681 V ,) 

(U//FOUO) Inf ormation is relevant if it tends to make a fact more or less probable. In the 
context of NSLs, there must be a reasonable belief that the information sought through the 
NSL either supports or weakens facts being investigated in an investigation. For example, 
financial records believed to support a subject's assertion that lie or she was in the United 
States at a given time when the FBI believes he or she was outside the United States are 
relevant to the investigation because they tend to exculpate the subject. On the other hand, 
phone records of a sibling of a subject of an investigation not known to be in contact with the 
subject would not, baring additional information, he relevant to the national security 
investigation. 

(AJ//FQUQ) In addition to the information being relevant, the investigation of an US PER 
cannot be conducted solely based on activities protected by the First Amendment. For 
example, the FRI cannot issue an NSL for phone records of an individual solely because the 
individual attends a mosque that is also attended by international terrorism (IT) subjects. The 
individual's attendance at a place of worship is First Amendment-protected activity, on which 
the FBI cannot base an investigation. On the other hand, if the FRI reasonably believes that, in 
addition to attending the same mosque as the IT subjects, the individual received money 
transfers from IT subjects, then an NSL seeking his or her phone or bank records would he 
relevant to a national security investigation and would not be based solely on First 
Amendment-protected at t ivtli es . 

(U FOLIO) The LU that requests the issuance of an NSL must provide a sufficiently detailed 
explanation of the predication for the investigation and the relevance of the material sought by 
the NSL so that a meaningful review can be conducted. The information necessary to make a 
judgment regarding predication and relevance should be contained in the four comers of the 
EC. If the necessary information cannot be included in the GC because, for example, the 
information is classified Top Secret or the investigation involves insider espionage, the EC 
should dearly reference the source document that provides the predication and explain why 
the underlying information cannot be included in the EC. 

(U//FOUO) Approval of an NSL must include a review of the predication of the underlying 
investigation. Although there is no legal review' for opening an investigation* there must be a 
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review of the predicate for the investigation in determining whether an NSL request meets the 
legal standard of the relevant statutory authority, 

(U//FOUO) As with all investigative methods, before requesting an NSL, the employee 
initiating the request should consider whether an NSL is the least intrusive and reasonable 
means based upon the circumstances of the investigation to obtain the needed information, 

See DIOG Section 4.4. 

1 8. 6. 6.3 , S (U) Special Procedures for Requesting Communica nos Subscriber 

Information 

(U/VFOUO) If only subscriber information is needed tor an investigation, an NSL should be 
issued for subscriber records rather titan a broader request for subscriber and toll 
bilEing/transactional records. 

(U/,'FGUQ) Generally, all toll btlling'transaclional records responsive to the NSL may he 
Uploaded into FBI databases. Before issuing NSLs seeking to identify a subscriber of facilities 
contained in such toll/traasactional records, the employee should determine whether the 
identities of the subscribers of some or all of the telephone numbers/email accounts identified 
in the roll billing/transaclional records are needed to advance the investigation, If so, the 
employee may issue subsequent NSLs to identify the subscribers) of such telephone numbers 
or email accounts. NSLs should not be used to identify the subscribers of numbers or email 
accounts if that information is not needed to advance the investigation and should nol be 
issued unless and until that identity becomes needed for the investigation or some other 
investigation. 

(U//FQUO) If a subscriber’s identity may contribute to the investigation, the investigator 
should also consider whether an NSL is the least intrusive and reasonable means to obtain the 
information. In some instances, information obtained from open source or government 
databases may be sufficient to meet investigative needs. The information obtained from such 
sources may not be current or accurate: however those factors, among others, should be 
considered in determining whether to issue an NSL. 

1 8.6. 6.3. 6 fU) PVRA TtON OF APPROVA L 

(U)The authority for an NSL remains valid until the information requested is fulfilled, 

18.6.6.3.7 (U) Specific Proced ures 

(U/VFOUO) A cover Ft" that documents the relevance of the information sought and the need 
for non-disclosure (if a non-dixe Insure provision is included in the NSLJ must accompany all 
NSLs. All NSLs. with limited exceptions discussed below* must be created on the NSL 
subsystem to the FISA Management System (FIS AMS). The hC must reference an 
investigative file — not a control file — to which die information sought is relevant . 

(U/VFOUO} The NSL subsystem allows for the web-based creation of NSLs and supporting 
LCs. Use of the subsystem ensures that the information in the NSL is consistent with the 
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supporting EC, the appropriate statutory authority is cited, and the necessary approvals are 
obtained. 

(U//FOUO) Under the following circumstances only. NSLs may be created outside the NSL 
subsystem: 

A) (U//FOUO) \SLs seek ini' .second~gctterathn^commHnirv of interest informatfan : These 
NSLs require specific language ami require a demonstration of the relevance of the second- 
generation information to the investigation. This type of NSL request is used rarely and is a 
subset of NSLs served by the Communications Analysis Unit (CAU), This type of NSL is not 
yet available in the NSL subsystem. Such NSLs may only be created outside the NSL 
subsystem with prior approval from the Deputy General Counsel (DGCjufthe National 
Security Law Branch (NSLB) The DfiC's approval must be documented in the EC 
authorizing (he NSL. 

H) (UZ/FOLO) Time writhe situating!* : If there is an emergency or other time sensitive matter 
in which not all approvals required in the NSL subsystem can be timely completed or 
technical issues pose a harrier to using the NSL subsystem, the NSL and EC may be created 
outside the NSL subsystem. The EC authorizing the NSL must explain why the NSL is "time 

sensitive.” 

C) fU/POUCh insider eu Uo/mee imvmieatiom ; Sensitive insider espionage investigations, may 
justify the creation of NSLs outside the NSL subsystem. Such NSLs may only be created 
outside the NSL subsystem with prior approval from l he DGC of NSLB or an NSLB Section 
Chief. The approval of the NSLB DGC or Section Chief must he documented in die EC 
authorizing the NSL 

D) (U//FQUO.I \JJ-v rtnumm* siw ifu timifins. tvasuasf t Such NSLs may only he created 
outside the NSL subsystem with prior approval from the DGC of NSLB or an NSLB SC. The 
approval of the NSLB DGC or Section Chief must be documented in the EC authorizing the 
NSL. 

E) (U//FOU< >> ( ttrtitii ? VS7 s : These NSLs are issued to provide authority to retain information 
already provided in response to an earlier NSL. The EC authorizing the NSL must slate that 
the NSL is a “curative NSL^and include a brief explanation why a curative NSL is necessary. 

F) f Li/AFQLH- >!> V.S/a i'tmttritiins non-standard hitisuuec : These NSLs seek, for example, a 
specific bank record rather than all financial records in the bank’s possession, or a specific 
type of electronic communication transactional record rather than all transactional records. 
Such NSLs may only be created outside the NSL subsystem with the prior approval of the 
DGC of NSLB, an NSLB SC, or the Unit Chief of the National Security Law Policy and 
Legislative Review Lbiit of NSLB. The NSLB’s approval must be documented in the EC 
authorizing the NSL. 

i L FOUO) NSLs created outside the NSL subsystem must be created using the model NSLs 
and ECs available on the NSL B w ebsite . In every case in which an NSL is created outside the 
NSL subsystem, the EC approving the issuance of that NSL must include the following 
information: (i) the reason the NSL was created outside the NSL subsystem; and (if) if prior 
approval was required, from whom it was obtained. Such NSLs must contain a lead to NSLB 
.so that information needed for Congressional reporting purposes can be recorded, as well as a 
lead to the relevant HQ operational unit for informational purposes. 
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(U//FOUO) No later than len (10) days after the issuance of an NSL outside the NSL 
subsystem, both the NSL and EC must be uploaded to ACS (unless otherwise exempted from 
uploading into ACS), as well as forwarded via email to NS LB at the following email address 
HQDIVOQNSL REPORTING. If the investigation involves a particularly sensitive matter 
that precludes emailing the NSL and/or EC', then a separate FC, containing notice of the 
sensitivity and the statistical information needed for tracking NSLs, must be sent to the DGC 
ofNSLR 

(U//NFOUO) Any question concerning whether an NSL may be created outside the NSL 
subsystem must he directed to NS LB, 

(U//FOUO) For additional information regarding seeking subscriber identifying information, 
see the Attorney General approved Procedures for the Collection, Use, and Storage of 
Information Derived from National Security Letters . 

1 8. 6-6-3. 7,1 (U) Cover EC 

(U// FOLIO} The EC must reference an investigative file — nol a control tile — to which the 
tn formation sought is relevant. 

(U//FGUO) If non-disclosure of the NSL is sought, the EC must set forth the factual 
predicate for imposing non-disclosure, The certification supporting a non-disclosure 
obligation must assert that disclosure may endanger national security: interfere with a 
criminal, counterterrorism, or counterintelligence investigation: interfere with diplomatic 
relations; or endanger the life or safely of any person. Accordingly, the EC must establish 
why any of those dangers may arise from disclosure of the NSL. Possibilities include: 

A) £ U/.'FOI JO ) Disclosure may prematurely disclose a national security investigation to the target 
and thereby cause him or her tc change his or her behavior patterns to thwart detection: 

B) (U, ■'/FOLIO) Disclosure may prematurely disclose a national security investigation to other 
individuals who work with or in some way are affiliated with Lhc target or the subject matter 
of the national security investigation and (hereby cause the other individuals to change their 
behavior patterns to thwart detection: 

C) (U7TOUO) Disclosure may alert other individuals who use the service uf the NSL recipient 
that die recipient has been asked to provide information to die FBI, and thereby cause the 
other individuals (Cl change (heir behavior to thwart detection, 

D} (UvVFOUO) Disclosure may persuade those engaged in questionable activities to avoid 
patronising the entity known tube subject tu requests to reveal account information and 
thereby allow those persons to thwart detection; 

E) (U//FQUG) Disclosure may prematurely disclose a national security investigation and there by- 
cause surveillance techniques to be compromised or endanger undercover FBI employees and 
confidential sources; 

F) (U//FOUO) Disclosure may prematurely disclose a national security investigation and thereby 
provide an opportunity for someone Eo create intentionally-flawed (i.e., compromised) foreign 
intelligence; 

G) (U//FOUO) Disclosure may prematurely disclose a national security investigation involving 
an hostage situation and thereby endanger the life or safety of u hostage: 
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H) (U//FOUO) Disclosure may prematurely disclose a national security investigation and thereby 
cause the subject or a material witness lo flee or to destroy or tamper with evidence; 

I] (U//FOUO) Disclosure may prematurely disclose a national security investigation and thereby 
result in publicity thai makes it difficult for the target of the NSL andor others to receive a 
fair trial; 

H (UV/FOtJO) Disclosure may prematurely disclose a national security investigation involving 
an imminent threat of terrorism and thereby endanger the life or safety of others; or 

Kl (U/'FOUOl Disclosure may reveal the existence of a national security investigation involving 
a foreign government and thereby damage diplomatic relations. 

(U//FQUO) This list is not exhaustive. There may be other reasons why art NSL should 
not be disclosed, and if so, those reasons should be set forth in the EC. 

I 8.6.6. 3.7.2 ( LI) Copy of N SL 

(U//FOUO) A copy of the signed NSL musl be retained in the investigative file and be 
uploaded under the appropriate NSL document type in ACS, Documented proof of 
service of NSLs must also be maintained in the NSL sub- file. 

18,6.63.73 ( IT) Second-Generation Information 

(U//FOUO) Under limited circumstances, one NSL may simultaneously request toll or 
transactional information fora “seed number" {normally the targe! of the investigation) 
and toll or transactional information for ail telephone numbers that have been in contact 
with the seed number (“second- generation records”). If an N$L seeks second-generation 
records, the NSL EC must clearly state that second-generation information is being 
sought and demonstrate the relevance of the second- generation information to the 
national security investigation. Second-general ion phone numbers for which information 
is obtained must be separately reported to NS LB for Congressional reporting purposes. 
Requests for second-generation information may only be approved by the DGC ofNSLR. 

18.6.63.7.4 (11) Contact with Members of the News Media b* a “Seed 
Number” 

{U.'/FGUO) A second generation NSL may not be used ilThere is reason lo believe the 
“seed number" has been in contact with members of the new* media. 

1 8.6.63.7.5 ( Li ) Em ercen cy C i k< l mst ances 

(U//FOUO) EC PA protects subscriber or communications transactional information from 
disclosure by providers of telephone or other electronic communication services. 
Generally, an NSL, grand jury subpoena, or another form of legal process must he used to 
compel a communication service provider to disclose subscriber or transactional 
information. In emergency circumstances, however, the provider may voluntarily disclose 
m formation to the FBI if the provider, in good faith, believes that an emergency 
involving danger of death or serious physical injury to any person exists and requires 
disclosure without delay. As a mailer of FBI policy, when there is a danger of death or 
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serious physical injury that docs pen permit the proper processing of an NSL, an 
administrative subpoena (if permissible). a grand jury subpoena, or a letter io the provider 
citing 18 LF.S.C. § 2702 may be used to request emergency disclosure, if approved by a 
SAC. ASAC, or FBIHQ Section Chief. If lime does not permit the issuance of an 
emergency letter citing IS U.S.C. § 2702. an oral request to the provider may be made, 
but the oral request must be foNowed-up with a letter to the particular provider. In either 
situation, an FD-1053 Form, which automatically generates the letter, must be completed. 

(UV/FOL’O) The letter (an FD-1053) serves to: (i) obtain the required approval of a SAC 
or ASAC in a field office or a Section Chief in FES I HQ; and (ii ) document the factual 
basis for the emergency disclosure for inclusion in the investigative file or in a control 
file (if no investigative Fite has been opened). 

(U//FOUQ) This KD-1G53 letter should be used instead of any form provided by the 
provider, If the provider insists that its form must be used in lieu of the standard letter, 
the provider's form may be used after the form is carefully reviewed and appropriately 
edited to make dear that: (i) 18 U.S.C. § 2702 authorizes the emergency disclosure; and 
(ii) subsequent legal process is neither provided nor required by 2702 and, therefore, no 
follow-up legal process will be provided. Questions concerning language in the 
provider's farm should be directed to the CDC or OGC/NSLB (national security 
emergencies) or ILL (criminal law emergencies). 

18 , 6 . 6 . 3.0 (U) Notice and Re forts no Requirements 

(D//FOUO) The National Security Law Branch at FBI! IQ compiles NSL statistics for 
reporting to Congress. The NSL subsystem (FISA MS) automatically records the information 
needed for Congressional reporting. If the NSL is created outside the subsystem, the EC must 
include all information necessary for NS LB to report NSL statistics accurately. The LC must 
delineate the number of targeted phone numbcriv'e-mail accounts/ financial accounts that are 
addressed to each NSL recipient. For example, if there are three targets, ten accounts, and six 
recipients of an NSL. the LC must state how many accounts are the subject of the NSL as to 
Recipient 1 . Recipient 2, etc, !t is not sufficient to indicate only that there are ten accounts and 
six recipients, 

(U//FOUO) In addition, (he FBI must report the USPLR status of the subject of all NS Ls (as 
opposed to the target of the investigation), other than NSLs that seek only subscriber 
information. While the subject is often the target of the investigation, that is not always the 
case. The F-C must reflect the US PER status of the subject of the request the person w r hose 
information Lhc FBI is seeking, Ifthe NSL is seeking information about more than one person, 
the EL’ must reflect the US PER status of each person. (Sec the model EC's on the NSLU 
website .) 

1 8, 6 , 6 . 3 , 9 fU) Receipt of NSL In forma tion 

(U7FOUO) Immediately after receiving material in response to an NSL and hefore 
uploading it info any FBI database, the employee who initiated the request for the NSL, 
including an employee of an FBIHQ operational Unit who initiates an NSL in an investigative 
file that was opened by and resides in a field office, is responsible for ensuring that the 

. r iTHim Oatc 
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received information is responsive to the request and that there has been no overproduction . If 
the information is appropriately responsive, the employee who initiated the request for the 
NSL must ensure that the information is stored in the appropriate investigative File and that 
receipt of the material is documented in the NSL subsystem. Relevant information properly 
obtained in response to a valid NSL may be uploaded (hereafter into any database, For 
procedures on how lo handle electronic returns from certain ISPs see DIOG Section 
18 . 6 . 6 . 3 . 10 . 

(U//FOUO) Any material that is not covered within the four comers of the NSL request 
(.including the NSL attachment ) must be handled as discussed below'. Such information can 
fall into two categories. First, it can be irrelevant information (hereafter "Irrelevant 
Information"), which the FBI has no right either to seek or retain. Irrelevant Information is 
collected, for example, when a telephone company transposes numbers in a telephone number 
and thereby provides toll billing information concerning the wrong telephone number. 

Second, it can bq relevant information (hereafter “Relevant Overproduction”) but be in excess 
of what the NSL requested. Relevant Overproduction occurs, for example, when the NSL 
seeks financial records on John Doc fora specified period. The bank provides the requested 
records, but the bank also provides records on John Doc beyond the specified period. Both 
Irrelevant Info rraat ion and Relevant Overproduction constitute an overproduction , and they 
must be treated distinctly as described below. 

(U.vFOUO) Irrelevant Information may not be retained or uploaded into any FBI database. It 
is therefore critical that all information returned in response to an NSL be reviewed BEFORE 
uploading it irtio any FBI database, including Telephone Applications. Any Irrelevant 
Information must either be destroyed or returned to the entity that produced it. at the 
discretion of the field office or division from which the NSL originated. FBI employees are 
permitted to destroy the overproduced information, although an 5SA must approve the scope 
of what is to be destroyed. Any Irrelevant Information that is returned electron really and 
reviewed in Data Warehouse System- EL 5 UR Data Management System t DWSrirDMS) must 
be destroyed using the process established in that system. If there is any question whether the 
information provided is within the scope of the NSL, the CDC or ADC must be consulted. 

(U//FOUO) Relevant Overproduction must be sequestered with the employee's supervisor 
and may not be uploaded into any FBI database or used in the investigation until another NSL 
has been served to address the overproduction. The Held office or FtQ division may serve a 
"curative" NSL to authorise the retention and use Relevant Overproduction if: (i) the 
investigation is still pending, (ii) the overproduced information is relevant to the investigation, 
and (iii) the FBI may lawfully obtain the overproduced information under statutory authority 
(i. e.. an NSL statute), After the " curative ” NSL has been served, the FBI may immediately 
upload and use the sequestered information, 

(U//FQUO) If the response contains relevant information within the scope of the NSL. but 
also contains irrelevant information: or relevant overproduction, FBI employees may redact 
the irrelevant information or the relevant overproduction. The employee's supervisor must 
approve the scope of the redaction. I f there is any question whether the information provided 
is within the scope of the NSL, the CDC or GGC must be consulted. The method of redaction 
is left to (he discretion of the employee, but redacted information must not be visible, used in 
the investigation, or uploaded into any FBI database. The method of redaction will vary 
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depending on whether the information was provided in hard copy or electronically. After the 
irrelevant or overproduced information has been redacted, the remainder of properly produced 
information may be uploaded into any database and used in the investigation. 

(U//FOUO) Incidents involving third-party overproduction in response to an NSL where the 
FBI did not use or upload the overproduced information into any FBI database must be 
reported to OGC/N5LB for tracking purposes. This type of incident should not be reported as 
a, potential JOB matter. OGC/NSLB will not adjudicate such matters or respond to the report. 
However, OGC/NSLB uses the in formation to track third- parly NSL overproductions. 
Procedures for reporting such matters are set forth in sections 4.4 to 4.7 of the Guidance on 
Intelligence Oversight Brjard {IOB) Matters, Policy Implementation Guide 0 1 bUH PCi . 

(U//FOUO) Incidents involving third-party overproduction in response to an NSL where the 
FBI used or uploaded the overproduced information info any FBI database must be reported 
as a potential IOB matter. Procedures for reporting such matters are set forth in sections 4.1 to 
43 of the Guidance on Intelligence Oversight Board {IOB) Matters, Policy Implementation 
Guide 01KHPG. 

(U.'VFOUQ) All responsive records must be placed in an NSL sub-file of the investigative file. 
These records shall remain with the investigative file until the file is destroyed in accordance 
w ith the disposition schedule approved by the National Archives and Records Administration 
fNARA). The sub-file must be opened in ACS, and the receipt and tiling of records must be 
recorded in an EC. 

18. 6 . 6 3.10 (U) Electronic Ser vice ano Electronic Returns of NSLs 

(U//FOUO) Effective Jamtaiy 31, 201 L absent exigent circumstances or restricted 
investigations, all NSLs served or certain Internet Service Providers (ISPs) will be served and 
returns will be received electronically, A current list of ISPs participating in electronic service 
and electronic returns of NSLs wilt he maintained on F1S AM 5. 

(U'VFOUO) All NSLs will continue to be created in compliance with DIQG Section 1 8.6.6. 
The process for service of the NSL will, however, be different. After the NSL has been 
approved in F1SAMS, the employee who initiated the request for the NSL will receive an 
email notification that DWS-EDMS will deliver the NSL electronically. The field office that 
issues the NSL must promptly scan the signed NSL and email it to HQ.DIV.tK_DITLJ.NSL. 
The original NSL must be placed in the appropriate NSL sub- file. Any changes to this process 
will be posted on DWS-EDMS and FIS AMS. 

(U//FGUO) NSL returns received electronically will only be available for review ip a 
sequestered area of DWS-EDMS. When the NSL results have been received and loaded into 
DWS-EDMS, the initiator of the NSL and the ease agent will receive notification that the 
results are available in DWS-EDMS for review for possible overproduced information. If any 
overproduced information is identified it must be removed from DWS-EDMS. After the 
employee has confirmed that there is no overproduction, the information may be released into 
the general DWS-EDMS database Ibr analysis and investigation by any employee who has 
access to DWS-EDMS. Overproduced return information must be handled pursuant to the 
directions set forth In DIQG Section 18.6.6.3.9, 


Vernon DatL'd. 

October 15, 20 ; 
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(U//FOUO) For NS L returns that are received electronically, the employee who initiated the 
request for the NSL or higher designee must upload the electronic results into ACS by: 

A) I LJ /FOUO) Printing or exporting responsive return information into an Excel spreadsheet, a 
PDF document, or electronic medium (e.g, T CDoT DVD) from DWS-EDMS and storing it in 
the appropriate NS.L subfile using a I A or FD340 envelope which will be reflected in ACS, 
All hard copy returns from other provider? must continue being stored in a 1 A or FD340 
envelope in the NSL subfile: and 

B) (U//FOUO) Uploading an EC confirming the receipt of the results, including die subject's 
information, and slating that the results can be Located in DWS-EDMS. 

(U.7FOUO) The employee w-ho initiated the request tor the NSL or his/her designee must also 
ensure that receipt of the records is documented within the NSL subsystem, if the employee 
wishes, the return information may also be uploaded to ACS or other databases. 

(U//FOUO) More information about DWS-EDMS, including its review and analytic tools, 
easy access links, and a step-by-step guide to requesting access can be obtained at the ST AO 
web page (http : //ho me, lb met. fhiSTB/ slan /ST AO O PS / AT A U/Pagc s/D W S- E DM S . aspxj. 


(U//FOUO) Any employee who may need access to NSL dam received electronically (either 
for analytic or investigative purposes or to review for overproduction ) must obtain access to 
DWS-EDMS, Instructions and requirements for gaining access to DWS-EDMS can be found 
on the STAG xveb page noted above. 

1 ft 6. 6.3.11 (U) Dissemina tion Of NSL Ma terial 

(U//FOUG) Subject to certain statutory limitations, information obtained in response to an 
NSL may be disseminated according to general dissemination standards in the AGG-Dom. 
The ECPA (telephone and electronic communications transactional records) and RFPA 
(financial records.) permit dissemination if consistent with the AGG-Dom and the information 
is clearly relevant to the responsibilities of the recipient agency, FCRA permits dis,scmi nation 
of identity of financial institutions and consumer identifying information to other EedcraE 
agencies as may be necessary for the approval or conduct of a foreign counterintelligence 
investigation. FCRA imposes nil special rules for dissemination of full credit reports. 

(LV/FOUO) Although the requesting EC is gqnqmlly classified because it reflects the 
predicate for the investigation and the need for the NSL, NSLs arc not classified nor is the 
material received in return classified. Information obtained in response to an NSL may be 
used in criminal proceedings without any declassification. In addition, information provided 
in response loan NSL that was obtained with an e-mail, telephone or other account number 
learned through FISA coverage is not considered FISA-dcrived and, therefore, approval from 
the Attorney General to use such information is not required, 

1 ft 6. 6.3. 12 (V) Special Procedures for Ha si dung Right to Financial Pftm cr Act 
Information 

(U//FOUO) For financial records received in response to a RFPA NSL, the employee who 
initiated the NSL or his/her designee must review the various items contained within the 
records (e.g„ checks written, items deposited, credit card charges) and determine whether the 
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information holds current or potential investigative value (i.e., whether it provides a new 
investigative need, addresses an existing investigative need, contributes to an existing 
intelligence collection requirement, or serves some other lawful investigative purpose that hits 
arisen since the NSL was issued} or has the reasonable potential to provide other FBI or 
Intelligence Community employees information of value consistent with their mission, 
information that is determined not to have current investigative value but that is responsive : 
the NSL may be retained in the hardcopy investigative file but may not be uploaded inti 1 ACS 
or other electronic databases. 

(U.'VFOUO) Only items that have current or potential investigative value should he included - 
products uploaded into ACS. Typically, such in format ion is uploaded into ACS by way of _r 
Exeel spreadsheet or a summary of items by category (c.g., wire transfers or deposit kernel 
included in an LC. An employee should upload the EC containing the summary' of the records 
in an NSL subfile in the electronic case management system so that such records may be 
later identified and easily retrieved. 

(U//FOUO) There is no requirement for determining the investigative value regarding 
responsive information provided in response to a FCRA or an ECPA NSL because such 
informal ion will always have investigative value or it is necessary to upload and engage m 
erosS’COiTelations to ascertain value that may not be obvious. 

(U'FQUO) For additional information regarding the handling of in formation provided in 
response to an NSL, sec the Attorney General approved Pr ocedures ibr the Collection , 
and Storage of Information Derived from National Security Letters . 

18.6.6 . 3.13 ( U) Pa vment for NSL- Derived In mum a tion 

(U//FOUO) No legal obligation exists for the FBI so compensate recipients of NSLs issued 
pursuant to ECPA {telephone and electronic communications transactional records! or Ft R A 
15 L’.S.C. § 168 I v (full credit reports in international terrorism investigations), and therefore 
no payment should be made in connection with those NSLs. See LC, 3 1 9X - H O- A ] 4K7~ ? 2i 
QGC- serial 222 , for a form letter to be sent in response to demands for payment concerning 
these NSLs. 

(U//FDUO ) Compensation is legally required for NSLs issued pursuant to RFPA (fmanciai 
records) and FCRA $ IhHlu (identity of financial institutions and consumer identifying 
information). A fee schedule has been adopted under ]2 C.F.K. 2 1 9 J „ Appendix A. and 
should be reviewed for the current reimbursement provisions, A copy of this fee schedule 
available on the GGC website att 

htlpi/Vhome. fb inet, fbi/DQ/QGC/Ma in%20 Law" Wa 2 ll L I b rarv ''c o s t_re i i n b u rs e f n e a t _g u i daticc.pdf 


Versum Diitticl. 
Qctnher 1 5, 201 
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1 8 , 6, 7 (U) INVESTIGA T1 VE METHOD: FISA ORDER FOR BUSINESS RECORDS 

( COMPVLSOR Y PROCESS) 


18.6.7.1 (U) Overview of Compulsory Process 

1 " FOL’Ol Compulsory processes may be used to compel the disclosure of any tangible 
things ( including books, records, papers, documents and. other items} relevant to an authorised 
investigation to protect against international terrorism or clandestine intelligence activities. 
Compulsory process in a Predicated Investigation includes, but is not limited lo, the use of 
FISA business records orders (described below in this section); administrative subpoenas 
lEMOG Section 18.6.4); grand jury subpoenas (DIGG Sections 38.6.5 and 18.5.9): trial 
subpoenas requested by the prosecuting attorney and issued by the trial judge; and NSL 
iDlQG Section 18,6.6). Compulsory process is used to gather in format tort In furtherance of 
f Bi investigations. The FBI's authority to use such compulsory process is based upon 
T veeutive Branch delegated authorizations, statutes, regulations and the FRCP. 

\n FBI CHS cannot be tasked to obtain records protected by the RFPA. FCRA, TCP A, 
Buckley Amendment, except as specifically authorized by such law. 

18.6.7.2 fU) Application 

L FOUQ) FISA Business Records Orders may be used during authorized national security 
investigations. This method may not be used for assistance to other agencies, unless relevant 
so an already open FBI authorised investigation. When collecting positive foreign 
jiidiiietmce. if the subject is a non-USPER. a request for business records pursuant to 50 
L 5 t ■?t J{ 1861-65 is lawful. This method may not be used in an Assessment. 

18 . 6 . 7.3 (U) Business Records Under FISA 


$8,6.73.1 (U) Legal Authority 

mj) 50 U,S,C- §$ 6 861-65 
IS 6 73*2 (U) Defishion of Method 

»U)A FISA order for business records, is an order for a ihird party to produce documents, 
records. and other tangible things (including books, records, papers, documents, and other 
sons i relevant to an authorized national security investigation, A FISA order for business 
rec ds may not be obtained during an Assessment FISA business records orders may not be 
cd to obtain information during a positive foreign intelligence investigation if the material 
kM relates to an USPER, 

k F BI and DOJ are addressing the issue of whether the Attorney General must approve any 
s of information obtained or derived from a FISA business, records order in any criminal, 
immigration, military, or other proceeding, including any proceeding outside the United 
- Mthough there is no statutory requirement to obtain Attorney General authorization, 

. 1 BI md DOJ arc working to determine whether, by policy, such authorization is required.) 
that issue is addressed. FBI employees must consult with their CD C or on NSL B 
i to determine whether advanced authorization of the Attorney General must be 
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18.6. 7.3.3 (U) Approval Requirements 

(U//FOUO) All requests For FISA business records orders must be submitted through 
FISAMS to NSLI3, which will draft the application. The request and the draft applicate ■" 
must then be submitted to the DOJ Office oFlntelligeocc (OI). Each request must include a 
statement of the facts and circumstances relied upon by the applicant to establish that the 
records sought are relevant to an authorized investigation, and supporting the need for non- 
disclosure, if non-disclosure is requested. Requests classified up to Secret must be submitted 
through FISAMS on FRINET. Requests classified Top Secret (TS) and/or Special 
Compartmentalized Information (SCI) must be submitted through FISAMS on SCION. I teld 
offices not having SCION access must prepare a paper copy of the request form, route it for 
appropriate signatures, and thereafter secure fas the request form to the FRIHQ operational 
unit handling the request. The operational unit will enter the request into FISAMS on SCION 
Ira field offices not having SCION access, the SAC, CDC, and ABAC must sign the paper 
copy of TS and/or SCI requests. 

(U// FOLIO) The Director has delegated the authority to make an application for an order 
requiring the production of library circulation records, library patron lists, book sales records 
book customer lists, firearms sales records, tax return records, educational records, or tried v* 
records containing information that would identify a person, only to the Deputy Director and 
the Executive Assistant Director for National Security, 

18.6. 7.3.4 (U) Duration of Court Approval 

(U) Authority for a FISA business records order is established by court order. 

18.6 73,5 (V) No Tice a no Reporting Requiremen ts 
(U) There are no special notice or reporting requirements. 

1 8. 6 . 73.6 ( V) Compliance Requirements 

(U) The employee who receives material produced in response to a FISA business records 
order must do the following: 

A) (U//FOUO) Handle the material as required by the Standard Minimization Procedures 
Adopted for Business Records Orders and any specialized minimization procedures required 
by the Foreign Intelligence Surveillance Court (FISC) in connection with the particular order 
for production, 

B) (LI | See the current classified FISA Business Records standard minimization procedures. 
h|lp..^ home. .lb I net ■ t W PO/OGC -N 5L IVDw unwiHs/busi ness recor d s mini ntiza Lion pruccd me 
s pdf . 

1 8. 6. 7 . 3. 7 (U) FISA 0 vercollection 

(U//FQUO) 3rt accordance with Foreign Intelligence Surveillance Court (FISC) Ruie of 
Procedure 15, information acquired outside of the scope ol'the FISA authorization (""FISA 
overcollectioiT) w ill no longer be sequestered with the FISC, absent extraordinary 
circumstances. Contact NS LB for further guidance regarding the handling of any FISA 
overcollection, 


VtfFAIOEl liawid: 
fk'tottfH 1 3 , £u | 1 
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18.6,8 ( U) I NVESTIGA TIVE METHOD: STORED WIRE OR ELECTRONIC 

Communications and Transactional Records 

19.6.&1 (UJ Summary 1 

(U//FOU0) FBI employees may acquire the contents of stored wire or electronic 
communications and associated transactional records including basic subscriber 
information — as provided in 18 U.S.C. §§ 2701*2712 (Electronic Communications Privacy 
Act {ECPA)). Requests for voluntary disclosure under (lie emergency authority of 18 U.S.C. § 
2702 require prior approval from the field office A SAC Or FBIHQ Section Chief when 
appropriate. 

(U//FOUO) All requests for information from electronic communication service providers 
{e.g,, telephone companies, internet service providers) pertaining to a subscriber or customer 
must comply with ECPA. As used in EC PA, the term ‘'information pertaining to a subscriber 
or customer" should be read broadly. It includes* for example, information regarding whether 
a particular individual has an account with a covered provider. Thus, unless done in 
accordance with ECPA, an FBI employee may not ask a telephone company or internes 
sen' ice provider w hether John Smith has an account with the company (i.e., the FBI employee 
may not informally seek information that is statutorily protected prior to the issuance of 
appropriate process or the existence of an exception to ECPA). In addition, based on a 
November 5, 2008 interpretation of ECPA from the Office of Legal Counsel, the FBI may not 
ask a telephone company whether a given telephone number that the company services has 
been assigned to an individual. In short* In order to obtain any information specific to the 
subscriber from a telephone company or electronic communication service provider, the FBI 
must provide legal process pursuant to IS LLS.C. §§ 2703 or 2709 or the request must fall 
within the limited exceptions established in IS U,S,C, § 2702, and discussed below. 

(U//FGUO) ECPA does not, however* protect information that is not tied to a particular 
subscriber. Thus, the FBI does not need legal process or an exception to ECPA to ask a 
telephone company whether it services a particular telephone number or to obtain blocks of 
telephone numbers that are serviced by the particular company. 

1 8 .6.3, 2 (U) Application 

(U//FOUO) This investigative method may be used during national security Predicated 
Investigations and criminal Predicated Investigations as authorized by statute. The use of 
Search Warrants to obtain this information in Preliminary Investigations is prohibited. (See 
DIOG Section 18.6,8.4.2.3 below) This method may not be used for assistance to other 
agencies, unless the information to be obtained is relevant to an already open Predicated 
Investigation. This method cannot be used to collect positive foreign intelligence or during an 
Assessment. 

1 & 6,82, 1 (U) Stored Da ta 

(U) The Electronic Communications Privacy Act (ECPA)— 18 U,5.C. §§ 2701-2712— 
governs the disclosure of two broad categories of information: (i) the contents of wire or 
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electronic communications held in '“electronic storage 1 * by providers oP’electronic 
communication service 11 or contents held by those who provide "remote computing serv ice" 
to the public; and (it) records or other information pertaining to a subscriber to or customer of 
such services. The category of ’"records or other information" - can be subdivided further in. 
subscriber records (listed in 18 U.S.C, ft 2703(c)(2)) and stored traffic data or other record:? 

(U) Records covered by EC’PA include all records that are related to (he subscriber, including 
buddy lists, "friend 1 ' 1 lists (My Space)* and virtual property owned (Second Life). These other 
sorts of records are not subscriber records and cannot be obtained with a subpoena under 1 8 
U.S.C. ft 2703(c)(2) or an NSL under 18 U.S.C. $ 2709. 

1 8. 6.8.2 2 (U) Legal P hocks 

(U)The legal process for obtaining disclosure will vary depending on the type of information 
sought and whether the information is being voluntarily provided under IS U.S.C. § 2702 
(e.g.x with consent or when emergency circumstances require disclosure) or the provider is 
being compelled to provide the information under IK U.S.C. § 2703. a* outlined below . Hit 
process for compelling production under 18 U.S.C. § 2709 is discussed in the NSL section 
above. 

1 8. 6 . 8.2.3 (U) Retrieva l 

(U) Contents held in “electronic storage” by a provider of “electronic communication sen Ice 
for 1 80 days or less can only be obtained with a search warrant based on probable cause. 
Accordingly, such records may only be obtained during a Full Investigation, 

(U) Contents held by those who provide "remote computing service” to she public and 
contents held in "electronic storage” for more than 180 days by an "electronic communicator 
sen, Ice” provider can be obtained with; a warrant; a subpoena with prior notice to the 
subscriber or customer: or an order issued by a conn, under IK U.S-C $ 2703(d) when prior 
notice has been provided to the customer or subscriber (unless the court has authorized 
delayed notice). 

(U) Title 18 U.S.C. § 2705 establishes the standard to delay notice for an initial period of up 
to 90 days. Records or other information pertaining to a subscriber to or customer of such 
services, including basic subscriber information, can be obtained with a search warrant or an 
18 LLS.C, § 2703(d) order without notiee- 

J 8. 6. 8. 2. 4 (U) Basic Subscriber Ineorma tjojV 

(U) Basic subscriber information, as described in IS U.S.C. ft 27()3{cK2). can be compelled 
by a grand jury or adminis trative subpoena without notice. 

1 8.6.8. 2. S (U) PRESER VAttOfi OF STORED Da TA 

(U) The government is authorized under 18 U.S.C. ft 2703(f) to direct a provider to preserve 
records or other information I stored records or communications) in its possession for 90 days 
(which may be extended for ail additional 90-days) pending issuance of applicable legal 
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process for disclosure. To make a preservation request, the FBI must believe that the records 
will subsequently be sought by appropriate legal process. 

IS. 6, 8/2.6 (U) Cost reimbursement 

(U) IS O.S.C. § 2706 requires the government to reimburse for costs incurred in providing the 
contents of communications, records, or other information obtained under IS U.S.C. §§ 2702, 
2703, or 2704, except that reimbursement is not required For records or other information 
maintained by a communications common carrier that relate to telephone toll records and 
telephone listings obtained under 18 U.S,C. $ 2703. in essence, the government dties not have 
to reimburse for the cost of producing records that the provider maintains in the ordinary 
course of its business. 

18 .6.8. 3 [UJ L eg a l Authority 

(U) 18 U.S.C. §§ 2701-2712 
(U> AGCi-Dom, Part V.9 

(U) EC PA 18 U.S.C §§ 2701 -27 12 creates statutory privacy rights for the contents of 

communications in “electronic storage 1 ' and records or other information pertaining jq a 
viihseriber to or eusiomer of an “electronic communication service” and a “remote computing 
service." The statutory protections protect the privacy of an individual's electronic data 
contained in a networked account — that may otherwise fall outside the scope of the 
protections afforded by the Fourth Amendment —when such account or its service is owned or 
managed by a third-party provider. 

(U) EC PA generally: (ij prohibits access to the contents of wire or electronic communications 
while in “electronic storage" unless authorized (18 U.S.C. § 2701 ); (ii) prohibits a provider of 
service lo the public from disclosing the contents of wire or electronic communications while 
held in “electronic storage*” and prohibits divulging to the government any information 
pertaining to a subscriber to or customer of such service unless authorized ( 1 S U.S.C g 2702 J; 
and (Hi) authorizes the government In compel disclosure from a provider of stored contents of 
a wire nr electronic comm unicat ion and records or other information pertaining to a 
subscriber to or customer 1 1 8 U.S.C. § 2703). EOPA provides for reimbursement of costs 
incurred in providing the information acquired. 

iJJ) An FBI CHS cannot be tasked to obtain records protected by HCPA except as specifically 
authorized by such law. 

18.6.8.4 (U) EC PA Disclosures 

<U> ECPA authorities can be divided into two categories: (i) compelled disclosure— legal 
process to compel providers lo disclose the contents of stored wire or electronic 
communications (including e-mail and voice mail opened and unopened) and Other 
information, such as account records and basic subscriber information; and (ii) voluntary 
disclosure of such information from service providers. Each of these authorities is discussed 
below. 
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J ft & ft 4, 1 (U) Definitions 

A.) iUI I'it'i trtitffi Storage : is "any temporary, intermediate storage of a wire or electronic 
communication incidental to the electronic transmission thereof." or "any storage of such 
communication by an electronic communication service for purposes of backup protection of 
such communication," 18 U.5.C. § 2510(17). In short "ckctrunic storage" refers only to 
temporary storage, made in die course of transmission* by a provider of an electronic 
communication service. 

B) (U) Rermtttr Oimpitiim: Serricv (RCSj r is a service that provides “to the public” computer 
storage or processing services by means of an electronic communications system, 18 U.S.C. $ 
271 1(2). In essence, a remote computing service is an off-site computer that stores or 
processes data for a customer. 

C) (U) Electronic Communications System .- is "any w ire, radio, electromagnetic, photooptical or 
photodeetrome facilities for the transmission of wire or electronic communications. and any 
computer facilities or related electronic equipment for the electronic storage of such 
communications,’ 1 18 U.S.C, §251004). 

D) (U) Electronic Contmunicution Sen itd (LCS) : is "any service that provides to users thereof 
the ability Co send or receive wire or electronic eommunicaCions.’ 1 18 U.S.C, § 2510(15). For 
esampJe, telephone companies and electronic mail companies generally act as providers of 
electronic communication services. 

1 ft 6 8,4,2 (U) Compelled Disclosure 

(LI) IS U.S.C. § 2703 lists five types of legal process that the government can use to compel a 
provider to disclose certain kinds of information. The five mechanisms, in descending order 
of required threshold showing are as follows: 

A) (U) Search Warrant; 

B) (U) 18 U.S.C. § 2703(d) court order with prior notice to the subscriber or customer: 

C) (U) I S U.S.C. § 2703(d) court order without prior notice to the subscriber or customer; 

D) (U) Subpoena with prior notice to the subscriber or customer: and 

E) (U) Subpoena without prior notice to the subscriber or customer. 

(U) Generally, anything that can be obtained under ECPA with greater process includes 
access to information that can be obtained with lesser process. Thus* a search warrant car 
compel the production of everything that an 18 U.S.C. § 2703(d) order can compel (and then 
some), and an 1 8 U.S.C. § 2703(d) court order can compel everything that a subpoena can 
compel (plus additional information). The notice requirement, however, must be considered 
as a separate burden under this analysis: a subpoena with notice to the subscriber can be used 
to compel information not available using an IH U.S.C. $ 2703(d) order without subscriber 
notice. 

(U ) Note tor Telemurketine Fraud : When investigating telemarketing fraud, law enforcement 
may make a written request to the service provider to obtain the name, address, and place of 
business of a subscriber or customer engaged in telemarketing, See 1 8 U.S.C § 

2703(c)( 1 )(D), These requests do not require notice to the customer 
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18,6*8.4.2,] (U//FOUO) Notice — Orders No r to Disci, ose the Existence of a 

Warrant, Subpoena, or Court Order 

(U'/FOUO) FBI employees may obtain a court order directing network service providers 
not to disclose the existence of compelled process if the government has no legal duty to 
notify the customer or subscriber of the process. If an IS U.S.C, § 2703(d) order or (8 
U.S.C. $ 2703 (a) warrant is being used, a request fora non-disclosure order can he 
included in the applies Lion and proposed order or warrant If a subpoena is being used to 
obtain the information, a separate application to a court for a non -disclosure order must 
be made. 


18,6*8,4,2,2 (l r ) Legal Standard 

(U//FOUQ) A court may order an electronic communications service provider or remote 
computing service not to disclose the existence of a warrant, subpoena, or court order for 
such period as the court deems appropriate. The court must enter such an order if it 
determines that there is reason to believe that notification of the existence of the warrant, 
subpoena, or court order will result in: 

A) (U) Fndangerirsgthc life ur physical safety or an individual; 

B) (U) Flight from prosecution: 

C) (l!) Destruction of or tampering with evidence; 

D) (U) Intimidation of potential witnesses; or 

E) (L 1 ) Otherwise seriously jeopardizing an investigation or unduly delaying a trial, 18 L-S.C, § 
2705(b). 

18.6JL4.2J (L) Search Warrant 

(U//FQUO) Investigators can obtain the Full contents of a network account with a search 
warrant issued pursuant to FRCP Rule 41. However. FRCP Rule 41 search warrant may 
not be issued in Preliminary Investigations, See DIOG Section 18,7, 1.3, 4.4, 

18.6,8.4.2,4 (U) Court Oki>ek with Prior \oikh tq the Subscriber or 

Customer 

(U//FOUO) Investigators can obtain everything in a network account except for 
unopened e-mail or voice-mail stored with a provider for 180 days or less using a 18 
U.S.C. ■§ 2703(d) court order with prior notice to the subscriber unless they have obtained 
authority For delayed notice pursuant to 18 U.S.C. § 2705, ECPA distinguishes between 
the contents of communications that are in "electronic storage 1 " (e,g„ unopened e-mail) 
for less than ISO days, and those that have been in "electrrmie storage"' for Longer or that 
are no longer in '"electronic storage" (e.g., opened e-mail). 

(LI) FBI employees who obtain a eourt order under E8 U.S.C. § 2703(d). and either give 
prior notice to the subscriber or comply with the delayed notice provisions of 18 U.S.C- § 
2705(a), may obtain: 
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A) (U) “The contents of a wire or electronic communication that has been in electronic storage in 
an electronic communications system for mure than one hundred and eighty days;’ 18 U.S.C. 
§ 2703(a), 

B) (U) "The contents of any wire or electronic communication" held by a provider of remote 
computing service '"on behalf of ... a subscriber or customer of such remote computing 
service/' 18 U.S.C. &§ 27f>3(bK i )( BKit K 2703 (b)(2); and 

C) (U) Everything that can be obtained using a 1 8 U.S.C. (5 2703(d) court order without notice. 

(U) As a practical matter, this means that the government can obtain all associated 
subscriber and transactional records and the full contents of a subscriber’s account except 
unopened e-mail and voicemail (that has been in "electronic storage'’ ISO days or less) 
using a IS U.S.C. § 2703(d) order that complies with the prior notice provisions of' 18 

u s e. § 2703{bKlH B). 

(U) If notice would jeopardize the investigation, FBI employees can obtain an order 
delaying notice lor up to ninety days. Sec 18 U.S.C, § 2705(a). A request to delay notice 
may be included in the 18 U.S.C. IS 2703(d) application and proposed order. FBI 
employees may also apply to the court for extensions of the delay, See 38 U.S.C. §§ 
2705(a)(1)(A) and 2705(a)(4). Upon expiration of the delayed notice period, the 
government is required to send a copy of the request or process along with a letter 
explaining the delayed notice to the customer or subscriber. See 18 U.S.C, $ 2705(a)(5). 

/A 6. R.4.2.4. l (U) Legal Stamm* 

(U) To order delayed notice, the court must trnd that "there is reason to believe that 
notification of the existence of the court order may... endanger the life or physical safety 
of an individual; [lead to) flight from prosecution; [lead to] destruction of or tampering 
with evidence; [lead to] intimidation of potential witnesses; or . , . otherwise seriously 
jeopardise] an investigation or unduly delay[ ] a trial." I 8 U.S.C. §§ 2705 ( a )( E )(A) and 
2705(a)(2). The applicant must satisfy this standard ancw r each lime an extension of the 
delayed notice is sought. 

iLh.SJ.14.2 (l) Nationwide Scope 

(U) Federal court orders under 18 U.S.C, $ 2703(d) have effect outside the district of the 
issuing court. Orders issued pursuant to 1 8 U.S.C- $ 2703(d) may compel providers to 
disclose information even if the information is stored outside the district pf the issuing 
court. See 18 U.S.C. $ 2703(d) ("any court that is a court of competent jurisdiction* may 
issue a 18 U.S.C. § 2703(d) order); E8 U.S.C. § 271 1(3) (court of competent jurisdiction 
includes any federal court having jurisdiction over the offense being Investigated without 
geographic limitation). 

(U) 18 U.S.C. g 2703(d) orders may also be issued by state courts. See 18 U.S.C. §$ 

271 1(3), 3127(2)(B). These orders issued by state courts, however, do not have effect 
outside the jurisdiction of the issuing state, See 18 U.S.C, £§ 271 1(3), 
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18.6,8.4.2,3 (Lf) Court Ukluk \m i mu i Priuk Nm it i. m int Subscriber ok 
Customer 

(U) A court order under 18 L.S.C. § 2703<d> may compel disclosure of: 

A ( (U) All |r record(s) or other information pertaining to a subscriber 10 or customer of such 
service (not including ihu contents of commimicationj [held by providers of electronic 
communications service and remote computing service! V and 

BJ (U) Basic subscriber in formation that can be obtained using a subpoena without notice. 18 

U.S.C § 27 03(c)(1). 

IS. a. S. 4.X5. 1 (U) Types of Tsa ssa ctiosal Rf< ords 

(U) The broad category of transactional records includes all records held by a service 
provider that pertain to the subscriber beyond the specific records listed in 2703(eH2) 
such as a list of “friends" as used in social networking sites and virtual property owned as 
used in virtual worlds. 

(U//FOUO) Non-cOnlcnl cellular location information tails into one of two general 
categories: (i) cell site and sector information; or (ii) other provider-assisted geo-location 
information. FBI employees must contact the CDC and/or the A USA assigned to the 
investigation to determine what legal process may be required as court decisions in the 
federal districts and circuits vary on this issue, 

IS. 6, 8. 4*2. 5. 2 (V} Ceil site a so Sector Lsfor ma no.\ 

(LT) Cell site and sector Information is considered “a record or other information 
pertaining to a subscriber" and therefore., production of historical and prospective cell site 
and sector information ntav be compelled by a court order under 18 U.S.C, § 2703(d). 
Requests made pursuant to 18 U.S,C. § 2703( d) for disclosure of prospective cell site and 
sector information which is delivered to law enforcement under Communications 
Assistance for Law Enforcement Act (C’ALEA } at the beginning and end of calls- must 
be combined with an application for pen register/trap and trace device. Some judicial 
districts will require a showing qf probable cause before authorizing the disclosure of 
prospective cell site and sector Information. 

1 8, 6. $.4*15.3 (U) Other Geo-loca tios Informa nos A \ ailable to the 

Provider 

(U) Geo-location data that is distinct from cell sire (tower/sector) data has been 
developed hy earners, in part, to deliver certain location data for 91 1 calls and is 
implemented either through network-based or handset-based means. It is important to 
note that Only some of the cellular providers currently have the capability to make this 
data available to law enforcement. Each of these location methods differs materially from 
the tower/seetor information that is used by Lhe provider's network in the normal 
provisioning of sen-ice and that CALL A requires the provider to be able to deliver to law 
enforcement. Handset-based methods typically involve the use of GPS technology in 
which the data resides on the phone itself Network-based methods measure the radio 
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frequency signals that arc being transmitted from the user's phone handset during 
registration and/or call processing to al least one tower receiving the signal. 

(U//FOUO) In ihc ordinary course of providing service to the customer, the provider does 
not typically use this GPS location data. Accordingly, the data may not constitute a 
“record or other information” in Lhc provider’s custody within the moaning of IS U.S.C. 
£§ 2702 and 2705. Consequently, a FRCP Rule 4t search warrant should be obtained to 
compel the disclosure of such provider-assisted location data. The order should: (it 
be obtained in the district where the phone is located (as determined by lower data* visual 
surveillance, or CHS reporting); (2) seek permission to execute outside of daytime hours. 
(3) request disclosure for no longer than 30 days: and (4) request delayed notice under 1 s 
U.5.C. § 3 IG3a(b) for 30 days with notice ultimately given to the customer or subscriber 
The return should note "‘the exact date and time the device was installed and the period 
during which it was used" i.e., it should conform to the FRCP Rule 41 tracking device 
rule (which docs not. by its terms, apply but which is analogous), and the return should 
be made within 30 calendar days after use ends. 

(U) Recognized exceptions to the warrant requirement may, however, apply in certain 
situations. For example, if cellular geo-location data is requested from a provider in an 
’'exigent circumstance 1 ' based on an objectively reasonable basis to believe that the 
requested information is relevant to an emergency involving danger of death or serious 
physical injury, such disclosure would arguably be permissible either under IK USX ir 
2702(c)(4) — to the extent FCPA applies or under the exigent circumstances exception 
to the warrant requirement (if a warrant were raquired). 

(U> This standard only applies to stored information, For prospective information, DOJ 
recommends an emergency PR TT order and an IK U S. C. § 2703(d) order should also be 
obtained w hen judicial approval is sought according to the PR/TT statute. 

18.6,8.4.2.5.4 (V) LEGAL STAN&AHD 

(U) A court order under IK LLS.C. $ 2703(d) is known as an ''articulable facts" court 
order or simply a M d' r order. This section imposes an intermediate standard to protect on- 
line transactional records. It is a standard higher than a subpoena, but not a probable 
cause w arrant. 

(U) In applying for an order pursuant to 18 LLS.C. § 2703 (d), the FBI must state 
sufficient specific and articulable facts for the court to find that there are reasonable 
grounds to believe that the contents of a wire or electronic communication, or the recoin.’ 
or other information sought, are relevant and material to an ongoing criminal 
investigation. As a practical matter, a short factual summary of the investigation and the 
role that the records will serve in advancing the investigation should satisfy this standard 

I H.6.K.4.2.6 (U) Sl BttJtNA with Prior !St>iu i. ru mi: SubsCHibkh oh Custom eh 

(U//FOUO) Investigators can subpoena opened e-mail from a provider if they give prior 
notice to the subscriber or comply with the delayed notice provisions of IK U,S,C § 
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2705(a) — which requires a written certification by the SAC or ASAC tlmt there is reason 
to believe notification of the existence of the subpoena may have an adverse result 

(U) FBI employees who obtain a subpoena and give prior notice to the subscriber or 
eompty with the delayed notice provisions of 18 U.S.C, £ 2705(a) may obtain: 

A) (U) "The contents of any wire or electronic communication" held by a provider of remote 

computing service "oti behalf of a subscriber Of customer of such remote computing 

service." 18 U.S.C. $ 2703OX I KB)©, $ 2703(b)(2); 

3) (U) "The contents of a wire or electronic; communication that has been in electronic storage in 
an electronic communications system for more than one hundred and eighty days." 18 U.S.C, 
& 2703(a); and 

C) fU) Basic subscriber information listed in 18 U.S.C, $ 2703(eX2). 

(U) As a practical matter, this means that FBI employees can obtain opened e-mail (and 
other "unopened" stored wire or electronic communications in "electronic storage" more 
rharr 180 days) using a subpoena, so long as they provide prior notice to the subscriber or 
comply with the delayed notice provisions. 

<U> Notice; Prior notice of the subpoena must be provided unless a supervisory official 
has certified in writing that there is reason to believe that notification of the existence of 
the subpoena may have an adverse result, IR US*C, § 2705(a)( 11(B) and IS U.S.C. § 

2 705( a M4H authorizing 90-day extensions), in which case notice may be delayed for up to 
90 days. The term "supervisory official" is defined to mean the SAC or ASAC or an 
equivalent level official at headquarters, 18 U.S.C. $ 2705(a)(6), Upon expiration ofihe 
delayed notice period the government is required to send a copy of the request or process 
along with a letter explaining the delayed notice to the customer or subscriber. See 18 
U.S.C. § 2705(a)(5) This documentation must be placed with the subpoena in the 
appropriate investigative file. 

(L 1 ) Lwui \nmdtirtin ter dvh vine twtkv : fhe supervisory official must certify in writing 
that "there is reason to believe that notification of the existence of the court order may... 
erdangerf] the life or physical safety of an indi vidual' [lead to] flight from prosecution; 
[lend to] destruction of or tampering With evidence; [lead to] intimidation of potential 
WitJtt!$$e$; or... otherwise seriously jeopard izfe] an investigation or unduly dciay[J a 
trial." 18 U.S.C. $$ 2705(aH I HA). 2705(a)(2) This standard must be satisfied anew 
every time an extension of the delayed notice is sought. This documentation must be 
placed with the subpoena in the appropriate investigative file. 

I8.fo8,4.2>7 (11) Subpoena without Prior Notice to the Subscriber or 

Customer 

(U//FOUO) Without notice to the subscriber or customer, investigators can subpoena 
basic subscriber information ; 

(U) name; address; local and long distance telephone connection reeords, or records of 
session times and durations; length of service (including start date) and types of service 
used; telephone or instrument number or other subscriber number or identity, including 
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any temporarily assigned network address; and means and source of payment for such 
service {including any credit card or bank account number )[.]" IS U.S.C. § 2703(cK2L 

(U) These items typically relate to the identity of a subscriber, his or her relationship with 
the service provider, and basic session connection records. This list does not include 
other, more extensive transact! on- related records, such as logging information revealing 
the e-mail addresses of persons with whom a customer corresponded during a prior 
session. In the Internet context, "records of session times and durations," as well as “any 
temporarily assigned network address" include the IP address assigned by an Internet 
service provider to a customer fora particular session, They also include other 
information relating to account access, such as the originating telephone number for diab 
up Internet access or the IP address of a user accessing an account over the Internet. See 
PATRIOT Act § 2 1 0, 1 1 5 StaL 272, 283 {2001). 

A) (U) I. mat Stamford ; The legal Ihreshotd Ibr issuing w subpoensi is relevance to the 
investigation. Courts are reluctant to review the r ‘good faith'" issuance of subpoenas as long as 
they saiisty the following factors' : (i) the investigation is conducted pursuant to a legitimate 
purpose: ( ti ) the information requested under the subpoena is relevant to that purpose: (lit) the 
agency dues not already have the information it is seeking with the subpoena; and (rv) the 
agency has. followed the necessary administrative steps in issuing tiwsubpnena. 

(U/TOUD) In the event that a federal grand jury subpoena is used, however, appropriate 
protections against disclosure must he followed in compliance with FRCP Rule 6(e)- 

B) q: roi.it » Fugitive Investinathuw It is a misuse of the grand jury [o use the grand jury as -i - 
investigative aid in the search for a fugitive in whose testimony the grand jury has no interest. 
There fore, grand jury subpoenas for telephone billing records, should not be requested in 
federal fugitive investigations, (See DIOG Section 18.6-5.1 for limited situations in which 
courts have recognized when grand jury efforts to locale a fugitive are proper.) 

C) (U) Members nt the Yiurv Me din : Approval of the Attorney general must be obtained prior to 
Seeking telephone billing records ol'a member of Lhe news media. (See DIOG Seetion 

18 6.5.1,5) 

1 8, 6,8,4. 3 (U) Vol vntary Disclosure 

(U ) In order lo determine whether a provider of an Electronic Communication Service I ECS i 
or a Remote Computing Service (RCS) can voluntarily disclose contents or records, it must 
first be determined whether the relevant service is offered by the provider lo the public. 

A) (Uj Service NOT A vtiiiahle to the Pnbfic; £CPA does not apply to providers of services thai 
are not available "to lhe public accordingly such providers may freely disclose both contemn 
and other records relating to stored communications. And ersen Consulti n g: v. UOP, 99 I F, 
Supp. 1 04 1 |N,D. Ell. 1998) (giving hired consulting firm employees access [o LiOP's e-mail 
system is not equivalent to providing e- mail to lhe public}. 

B ) (U) Services Thai ARE Available tv the Public: If the provider o ffers services to the public, 
then ECFA governs the disclosure of contents and other records. 
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C| (U) If the provider is authorized In disclose (he information lo the government under IS 
U.S.C. $ 2702 and is willing to do so voluntarily, law enforcement does not need lo obtain a 
legal order or provide other legal process lo compel the disclosure, 

D) (U) If a provider voluntarily discloses under die statute, there is no follow-up legal process 
required or available. If the provider, on the other hand, cither may not or will not disclose the 
information voluntarily, FBI employees irnisl rely on compelled disclosure provisions and 
obtain the appropriate legal orders. 

1 > (U) Voluntary Disclosure of Stored Contents - ECPA authorizes the voluntary disclosure 

of stored contents when: 

a) (U) The originator, addressee, intended recipient, or the subscriber (in die case of 
opened e-mail l expressly or impliedly consents, IS U.S.C. § 2702(bK3K 

b) (U) The disclosure "may be necessarily Incident to the rendition of the service or to the 
protection of the rights or propertv of the provider of that service* 11 18 U.S.C. -Sj 
2702(bX5); 

c) (U) The provider "in good faith, believes that an emergency involving danger of death 
or serious physical injury to any person FCqu ires disclosure without delay u fin formation 
relating to the emergency. 1 ' tft U.S.C. $ 2702{bHK); 

d) {I'-'FOUOt An emergency disclosure under this statutory exception is justified when 
the circumstances demand action without delay to prevent death or serious bodily 
injury-; the statute does not depend on the immediacy of the risk, of danger itself, For 
example. an e-mail that discusses a planned terrorist attack but not the timing of the 
attack would constitute an emergency that threatens life or limb and requires action 
without delay, even though the timing of the attack is unknown. It is the need for action 
without delay lo prevent the serious harm threatened rather than the immediacy of the 
threat itself that provides the justification for voluntary disclosures under this except inn. 
H.R Rep. No. 107497 at 13-14 (2002) accompanying The Cyber Security 
Enhancement Act of 2002, H.R, 3482* which passed as part of the comprehensive 
Homeland Security Act of 2002, Pub. L. No. 107-2%, § 225 1 16 Stal. 2135 (2002). 

ej (U)The disclosure is made to the National Center for Missing and Exploited Children, 
in connection with a report submitted thereto under Section 227 of the Victims of Child 
Abuse Act of 1990. {42 U.S.C. § 13032 and 18 U $,C- S 2702Jb][&]); or 

f) (U) The contents are inadvertently obtained by the service provider and appear to 
pertain to the commission of i crime. Such disclosures can only be made to a law- 
enforcement agency, 18 U.S.C. § 2702(bM7) 

2 HU) Voluntary Disclosure of Non-Content Customer Records - ECPA permits a 

provider to voluntarily disclose non-content customer records lo (he government when; 

a] ( U) The customer or subscriber expressly or impliedly consents, I ft U.S.C. $ 

2702(c)(2); 

b) ( U) The disclosure “may be necessarily incident lo the rendition of the service or to the 
protection or the rights or propertv of the provider of (hal service," 18 U.S.C. § 
2702(c)(3); 

c> (U) The provider "in good faith, believes (hat an emergency involving danger of death 
or serious physical injury to any person requires disclosure without delay of information 
relating to the emergency.” 18 U.S.C. § 2702(e)(4); or 
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dj (LV/FOUO) ■'VWt' : An emergency disclosure under this statutory exception is justified 
when the circumstances demand immediate action fi.e„ obtaining^ sc losing 
information '■ without delay 1 ') to prevent death or serious bodily injury; the statute does 
not depend on the immediacy of the risk of danger itself. For example, an e-mail that 
discusses a planned terrorist attack but not Lite timing of the attack would constitute an 
emergency that threatens life or limb and requires immediate action, even though the 
timing of the attack is unknown. It is the need for immediate action to prevent the 
serious harm threatened rather than the immediacy of the threat itself that provides the 
justification for voluntary disclosures under ibis exception. H.ft Hep. No, 107-497 at 
13-14 (2002) accompanying The Cyber Security Enhancement Act of 2002, H.R. 34b2. 
which passed as part of the comprehensive Homeland Security Act of 2002, Pub. L No 
107-296, £ 225 I 16 Stal. 2135 (2002). 

e) (L 1 ) The disclosure is to the National Center for Missing and Exploited Children, in 
connection with a report submitted thereto under Section 227 of the Victims of Child 
Abuse Act of 1990, (42 U.S.C. § 13032 and IE U.S.C. § 2702[c][5]) 

3) (U) Preserv ation of Evidence under 18 U2S,C- § 27(13(1) - FBI employees may direct 
provider to preserve existing records pending the issuance of compulsory legal process 
Such requests, however, have no prospective effect. 

a) (U) Because there k generally no law regulating how long a network service provider 
must retain account records, there is a risk that evidence might he destroyed or lost in 
the normal course of the provider's business before Saw enforcement can obtain legal 
process to compel disclosure, A governmental entity is authorized to direct providers to 
preserve stored records and communications pursuant to IS U.S.C, § 2703(f). Once a 
preservation request is made, ECPA requires (hat the provider must retain (he records 
for 90 days* renewable for another 90-day period upon a government request. See \ X 
U.S.C. §2703 (f)(2). 

b) (U) There is no Legally prescribed format for 18 U.S.C. § 2703(f) requests. While a 
phone call should be adequate, a facsimile of art e-mail is belief practice because it both 
provides a paper record and guards against miscommunication. 

c) (U) FBI employees who send 1 8 U.S.C. § 2703( f) letters lo network service providers 
should be aware of two limitations. First, the authority to direct providers lo preserve 
records and other evidence is not prospective. Thus, 1 8 U.S.C § 2703(f) letters ean 
order a provider to preserve records that have already been created hut cannot order 
providers to preserve records not yel made. EF FBE employees want providers to record 
information about future electronic communications, they must comply with the 
electronic surveillance statutes. A second limitation of 18 U.S.C. § 2703(f) is l hat sorr*r 
providers may be unable to comply effectively with IK U.S.C. § 2703(f) requests 
without having an unintended adverse impact on the investigation. Effective 
communication with the provider about the practical impact and limitations of 
implementing the preservation request will enable die FBI employee lo make an 
informed decision regarding preservation. 

4| (U) Video l ope Rental or Sales Records - 18 U.S.C. § 2710 makes the unauthorized 
disclosure of" records by any person engaged in the rental, sale, or delivery of prerecorded 
video cassette tapes or similar audiovisual materials unlawful and provides an eralusioiur. 
rule to prohibit personally identifiable information otherwise obtained from being 
admissible as evidence in any court proceeding. Personally identifiable information is 
defined as "information that identifies & person as having requested or obtained specific 
video material or services ... 
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a) (U)The disclosure to taiw enforcement of “personally identifiable m formation" ts 
permitted only when the law enforcement agency: 

(ii (U) Has the written consent of the customer, 

( ii ) (U ) Obtains a search warrant issued under Rule 4J + FRCP or equivalent stale 

warrant; or 

(iii) (U ) Serves a grand jury subpoena; 

b) (IT) The disclosure to law enforcement of the name and address of a customer of a video 
tape service provider may be made without compulsory process when; the information 
being sought does not identify the customer as having requested or obtained specific 
video materials or service, and if the customer had prior opportunity to prohibit such 
disclosure. 

c) (U) This type of information was specifically not included in the definition of 

personally identifiable information 1 ' to allow law enforcement to obtain information 
about individuals during routine investigations such as neighborhood investigations. 

d) (U'VFOUO) The disclosure of "personally identifiable infofZnaliOfT in a national 
security investigation may be compelled through use of the above legal processes or 
pursuant to a business records order issued under 50 LLS.C. § I S6 1 . 


18,6,8,5 (U) Voluntary Emergency Disclosure 

18, 6, 8,5,1 (V) Scope 


tL FOLIO) EC PA protects subscriber and transactional information regarding 
communications from disclosure by providers of remote computing services or telephone or 
other electronic communication services to the public (remote computing services, telephone 
and other electronic com muni cat ions services are hereafter collectively referred to as 
■’electronic communications service providers" or “providers"), Generally, an NSL. grand jury 
subpoena, or other form of legal process must be used to compel the communication service 
provider to disclose such information. Pursuant to IS U.S.C. § 2702. however, an electronic 
communications service provider may voluntarily disclose customer records or the stored 
contents of comntun teat ions to the FBI if the service provider believes in good faith that an 
emergency exits involving danger of death or serious physical injury to any person which 
requires disclosure of such information without delay. The information necessary to satisfy 
the emergency disclosure standard may be provided by the FBI or may arise from information 
the electronic communications service provider independently acquires. No matter how the 
information is acquired, the statutory provision docs not provide authority lor the FBI to 
compel disclosure from the provider. Nor docs the statute require any follow up legal process 
ic.g., a subpoena or NSL, etc.) if an emergency disclosure is made. 

L FQUO) The FP-105.’ must be used when requesting emergency voluntary disclosures 
from an electronic communications service provider. The form will automatically generate a 
letter which must be signed and furnished to the provider. If time does not permit the issuance 
•'Tan emergency letter, an oral request may be made, but the oral request must he folio wed-up 
w ith a request letter. The request letter informs the provider that further legal process is not 
required and will not be forthcoming. 
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(U//FOUO) The FD-ID53 must alio be used in those circumstances when the electronic 
communications service provider voluntarily discloses such information without u request 
from the FBI. In these circumstances, the FD-1053 will not generate a request letter, but it 
will facilitate other required record keeping, as discussed below. 

{U//FOUO) In either situation, the ED- 1053 {and a copy of the signed request letter, if one is 
generated and provided to the electronic communications service provider! muse, be serialised 
in the investigative file, including the hardcopy file. 

(U//FOUO) The use of the FD-L053 form is designed to captures all the information the FBI 
needs to satisfy statutory annual Congressional reporting requirements. 

I U/7FOUO) If the employee provides the FD-1053 letter to an electronic communications 
service provider and the provider instead insists that the employee use the provider’s standard 
form letter, the employee should contact his/her CDC orOGC immediately; often times, the 
provider^ forms contain language representing that some type of legal process will be 
furnished subsequently. In such situations, if obtaining CDC orOGC guidance is not feasible 
under the emergency circumstances, the employee must strike out any language referencing 
future legal process te.g., NSL or subpoena) from the provider's standard form and hand- write 
on the provider’s standard form language that makes clear the information is being provided 
voluntarily pursuant to the ECPA and that Legal process will not be provided. With such edits 
(if necessary) the provider's revised form may be used and a copy must be maintained in the 
investigative file. If the electronic communications service provider will not permit such a 
change to its standardized letter, the provider’s letter may be used. The employee must 
document in an EC to the investigative Hie, as soon as practicable but no later than five (5) 
business days after the emergency disclosure is made, the name, title, and contact information 
of the provider’s employee who refused to modify the letter and such employee’s reason for 
refusing to accept the FD-1053. A copy of the EC must be sent to the CDC' and the Deputy 
Genera] Counsel of the National Security Law Branch or the Investigative Law Branch as 
determined by the type of investigation. The employee must also prepare the FD- 1 053 in the 
database for reporting purposes but docs not need to generate the request letter. 

1&.6.8.S.2 (tS) Duration of Approval 

(U) As authorized by Statute (e.g., for as long as the emergency necessitating usage exists and 
only in those circumstances when it Is impracticable to obtain other legal process such as a 
subpoena or NSL) and applicable court order or warrant. 

1 8 6 . 8S 3 { V) Specific Procedures 

AHU//rOUO} Required Farm* Att FD- 1 053 Form must be used by all employees to document 
requests for emergency voluntary disclosures ol information The FD-1053 Form will 
automatically generate a letter which the FBI can furnish to the particular electronic 
communications service provider. The FD-1053 Form must also be used to document those 
instances when a provider independently discloses emergency information without an initial 
request from the FBI. In such a situation, the FD-1053 system will not generate, and the FBI 
need not send, an emergency voluntary disclosure letter to the provider. 
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B) (U//FGL'0) Filit i# requirements a copy of each document used to obtain disclosure of 
information pursuant to the authorities under ECPA, c.g., the FM 053 Form, the emergency 
disclosure letter or the electronic communications service provider’s standardised form, must 
he serialized in the investigative file, along with documentation of any information obtained in 
response to the request. 

C) (U//FGUO) Contact with Providers: TTAs have primary responsibility for liaison with a 
provider's legal compliance staff and are, therefore, typically familiar with procedural 
requirements of the various providers, FBI employees should contact the TTA and theCDC or 
OGC for guidance and with questions relative to process and procedures for serving 
compulsory process or requesting voluntary disclosures, 

1 a 6 , a 4 (U) Cost Rembursement 

(U) Policy mid procedures regarding cost reimbursement are described in the following: 

A) (U) Standardized payment procedures may be found at 

http:/.-'honie , Jfoi net . i lu- 1 3 U /< , >fj l VI a i n ■ J <■. 3 ti 1 ,aw |; .:2d[ ,i brarv» ,; l~orms 'I L L ' ih o^<>L i bmrvAb Ei n 

B) (U) Cost Reimbursement Guidance can also be found in 18 U.S.C. § 270^ 

http://hon.ie. th i net . lbi/130 AX jC/M ai nWM .&w".,2(H jbrarv/ cost rei mbursement mi idanee.pd f 

I a 6. a a 5 (U) Notice a HD Reporting Requirements 

1 8 , 6,8, 5 ♦ 6 (U) Reportinc Vol vntar y Emergency disclosures 

(U) 18 U.S.C § 2702(d) requires the Attorney General to report annually to Congress 
information pertaining Co the receipt of voluntary disclosures of the contents of stored wire or 
electronic communications in an emergency under 18 U.S-C. §■ 2702(b)(8), specifically: 

AMU) The number of accounts from which the FBI received voluntary emergency disclosures; 
and 

B) (If) A summary of the basis for the emergency disclosure in those investigations that were 
closed without the filing of criminal charges. 

t U) The FD-1053 Form will capture information required to meet these reporting requirement. 
I a aa 5 . 7 (U) Rot Fs/REsmmmimEs 

il 'i The FD-1053 database system that hosts the FD-1053 form will. when necessary, follow- 
up with e-mail notifications to the issuing employee to ensure that the information included in 
the report to DGJ (which it uses to prepare the required Congressional report) is current. It is 
the responsibility of the FBI employee to respond to these requests for information as soon as 
practicable but no later than ten (10) business days. Failure to do so may be considered 
substantial non-compliance 1 ' pursuant to Section 3. 

i UJ OGOILB is assigned the administrative responsibility to complete the following by 
December 31 of each year: 

A KU) Tabu I ale the number of voluntary disclosures of scored contents received under Lhe 
authority of]K ISC. # 2702(b)(8) for the calendar year. 
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8) (IJ) EYepare a report summarizing the basis tor disclosure in those instances in ^hicb the 
relevant invesl trillion was el used withoul (he ii:ng of' criminal c Fiary-es; and 

t'HU) Submit tlia rqmrl to tlie Genera] Counsel lor review and submission to DGJ according to 
the statutory requirement lor annual reporl by l he Auerney General. 

18,6.8.6 (U) Other Applicable Policies 

( U } See the Stored Coimnumcalions Quick Relercnee Guide ,v I 2fJi)K 
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18,6,9 (U) Investiga ti vf Method: Pen Registers a nd Trap/Tra ce Devices 

(PR/TT) 

18.6.9.1 [U) Summary 

(U) Reft register and trap and trace (PR/TT) devices enable the prospective collection of non- 
content traffic information associated with wire and electronic communications,, such as: the 
phone numbers dialed from or to a particular telephone, including electronic communications; 
messages sent from or to a particular telephone, or the internet protocol (IP) address of 
communications on the Internet and other computer networks. 

1 8. 6. 9.2 [U] Application 

(LV.'FGUO) The PR/TT may be used in Preliminary and Full (national security and criminal } 
Investigations, This method may not he used: (i) for targeting an U5PER when providing 
assistance to other agencies, unless there is already an open FBI Preliminary or Full 
Investigation related to the request for assistance Or the predicate exists to Open a Preliminary 
or Full Investigation; < Li) tor targeting an USPEK when collecting against a foreign 
intelligence requirement; or (iii) during an Assessment., 

18.6.9.3 (U) Legal Authority 

| U) 1« US.C 3121 et seq- and 50 USX* §§ 1842 ct yeq. regulate the use of PR/TT 
devices. PR/TT orders authorize the collection of phone number dialed from or tu a particular 
telephone* IP addresses, port numbers and the “ITT and “From" information from e-mail; ihey 
cannot intercept the content of a communication, such as telephone conversations or the 
words in the ‘subject line'" or the body of an e-mail. 

18. 6 ,9 A (U) Def in ition of I n vestig ati ve Method 

fU) A pen register device or process records or decodes dialing, routing, addressing or 
signaling information transmitted by an instrument or facility from which a wire or electronic 
communication is transmitted, provided that such information must not include the contents of 
any communication. See IS U SX. § 3127(3), 

i V ) A trap and trace device or process captures the incoming electronic or other impulses that 
identify' the originating number or other dialing, routing, addressing or signaling information 
reasonably likely to identify the source of a wire or electronic communication, provided that 
such information does not include the contents of any communication. See 18 II.S.C. § 
3127(4). 

18,6.9,5 (U) Standards for Use and Approval Requirements for Investigative 

Method 

1 8, 6 , 9 5, 1 (U) Pen Regktfr/Trap and Tra ce under FtSA 

L i Applications for authority to use a PR/TT device can be made to the FISC in national 
security investigations. See 50 LLS.C. $ 1842. 
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1S.6.9.5 J.I (L) Legal Standard 

(U) Applications to the FISC arc to be under oath and must include: 

AMU) The identify of the federal officer making the application: and 

B) (U) A certification by the applicant that the information likely to be obtained is foreign 
intelligence information not concerning an USPER or is information that is relevant to an 
ongoing investigation to protect the United States against international terrorism or clandestine 
intelligence activities: and that such investigation, if of an USPER, is not conducted solely 
upon the basis of activities protected by the Finn Amendment to the Constitution. 

1 8.6JL5, 1 ,2 (If) Procedures 

(U//FOUO) Requests for opening or renewal of FISA FR/TT must be made using 
F1SAMS and! a standard ,r F]SA Fen Regi ster Trap and Trace Request Furni 1 ' for review 
by an attorney of the NSLB, OGC, For field offices/di visions with SCION access. Top 
Secret and/or SCI 4 including Secret SCI) level requests must be submitted through 
FISA MS on SCION, Field offices/di visions without SCION access must submit their Top 
Secret and/or SCI requests through appropriate secure channels (eg,, courier or secure 
fax). FIS AMS will route the request to appropriate panics for their review and approval 
of the request a_s it proceeds from the field through FBIHQ, DDL and FESC, Ruining a 
paper copy for signatures is nut required. 

18.GA5.1.3 (U) Emergency Authorit y — FISA: Stt LLSX:. § 1843 

(U//FOUO) Under the provisions of FISA, the Attorney General may granl Emergency 
Authority (LA) for PR/TT. Requests for Emergency Authority must be referred to the 
appropriate FBIHQ division, 

CU//FOUO) Because of the expedited nature of these requests, they are generally handled 
by telephone or in person and not through FIS AMS. In order to track the resulting court 
docket and create a record for renewal purposes, FISA MS has an express process that 
allows the FISA unit to create a tracking record and upload the resulting court orders or 
warrants. The express process can only be entered by the FISA unit at FBIHQ. After an 
emergency package and supporting FISA order arc obtained, contact the FISA unit to 
ensure the package is entered into FISAMS, 

A ) (U) The Attorney General may authorize the installation and use of a PR/TT upon a 

determination that an emergency exists and that the factual basis exists for a court order. The 
FISC must be informed at the time of the authorization and an application for a court order 
must he made to the court as soon as practicable, bul no more than seven (7) days alter 1 he 
authorization. If Lhe court does not issue an order approving the use of a PR/TT, an 
emergency-aulhoriaed PR/TT use must terminate: m the earliest of when the information 
sought is obtained, when the FISC denies the application, or seven (7} days after the Attorney 
General authorization is given. 

B) (U) If the FISC denies the application after an emergency PR/TT device has been installed, no 
information collected as a result may be used in any manner, except with the approval of the 
Attorney General upon a showing that the information indicates a threat of death or serious 
bodily harm lo any person,. 
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(U) Notwithstanding the Ibnc going, the President, acting through the Attorney General, 
may authorise the use of a PR/TT, without a court order, for a period not to exceed 15 
calendar days, following a declaration of war by Congress. See 50 U.S.C. § 1844. 

(U//FQUO) For an emergency authorization to use a PR/TT surveillance, DOJ 01 can he 
reached during regular business hours at (202) 514-5600 or through the DOJ Command 
Center at (202) 5 1 4-50f>0 at any time. 

IB. 6.^,5. 1.4 (U) FISA OVERCOLCECTION 

(U//FOUO) In accordance with Foreign Intelligence Surveillance Court (FISC) Rule of 
Procedure 15. information acquired outside of the scope of the FISA authorization 
C'FISA overco I lection"} will no longer be sequestered with the FISC, absent 
extraordinary circumstances. Contact NS LB for further guidance regarding the handling 
of any FISA overcol lection. 

18 6,9 5.2 (U) Criminal Pen Recister/Trap and Trace under Title 18 

(LI) Applications for the installation and use of a PR/TT device may be made to a “court of 
competent jurisdiction" — i.e., “any district court of the Uni Led States (including a magistrate 
judge of such a court) or any United States court of appeals having jurisdiction over the 
offense being investigated, or any court of general criminal jurisdiction of a State authorized 
bv the law of that State to enter orders authorizing the use of a pen register or trap and trace 
device," See 1 8 U.S.C. § 3127(2), 

J H.6.9,5.2. 1 { U) Lec : a i Sta\ dard 

(U) Applications for authorization to install and use a PR/TT device muss include: 

A)(U) The identity of the attorney for the government or the state law enforcement or 

investigative officer making (he application and the idenlKy of the law enforcement agency 
conducting Lite investigation: and 

BMC) A certification by the applicant that the information likely to be obtained is relevant loan 
ongoing criminal investigation hemg conducted by that agency. 

1 S.6.9,5.2. 2 { U U FO LI G) Prgc tt>u re s 

(U//FQUO) An SSA must approve a request for opening or renewal of PR/TT use by EC 
prior to submission of the request to an attorney for the government. Before approving 
such a request, the SSA should consider of the following: 

A) (U'/FOUO) The use of resources based on the investigative purpose sci forth: 

B) (U//FGUG} Whether there as sufficient factual basis for the certification tn be made in the 
application (i.e.. is the information likely lo be obtained relevant to an ongoing criminal 
investigation); 

C ) (U'/FOUO | Whether the customer or subscriber hai consented to the use of a PR/TT, see I S 
U.S.C. § 3121(b)(3); or 
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D) (UZ/FOUp) Whether the use of a PR/TT is the least intrusive method if reasonable and 
effective tased upon the circumfitancesof the investigation. 

(U//FOUO) A copy of the approving EC must be maintained in the pen register sub-fik 
“PEN." 

(U//FOUO) A PR TT order is executable anywhere within the United States and, upon 
service, the order applies to any person or entity providing wire or electronic 
communication service in the United Stales whose assistance may facilitate the executv-- 
uf the order. Whenever such an order is served on any person or entity not specifically 
named in the order, upon request of such person or entity, the attorney for the 
government or law enforcement or investigative officer that is serving the order must 
provide written or electronic certification that the order applies to the person or entity 
being served. 

18.6.9.5,2.3 (U) Emergency authority— Criming.; ih UAC\ §3125 

(U) The Attorney General, the Deputy Attorney General, the Associate Attorney Genera., 
any Assistant Attorney General, any acting Assistant Attorney General, or any Deputy 
Assistant Attorney General may specially designate any investigative or law enforcement 
officer to reasonably determine whether an emergency situation exists that requires the 
installation and use of a PR/TT device before an order authorizing such installation and 
use can, with due diligence, be obtained and there are grounds upon which an order could 
be entered authorizing the installation and use of a PR/TT, 

(L r ) An emergency situation as defined in this section involves: 

A) (U) Immediate danger of death or serious bodily injury to any person; 
fl) iLJ) Conspiratorial activities characteristic of organ! zed crime; 

Cl (U) An immediate threat to a national security interest; or 

£>! (U) An ongoing attack on a protected computer (as defined in l ft IJ.S.t, § 1030) that 
constitutes a crime punishable by a term of imprisonment greater than one year. 

(U) Only DOJ officials have the authority to authorize the emergency installation of a 
PR/TT. The FBI docs not have this authority. If the DOJ authorizes the emergency 
installation of a PR/TT. Ihe government has 48 hours after the installation to apply for 
and obtain a court order according to IS U.S.C. §3123. It is a violation of iaw to fail to 
apply for and obtain a court order within this 48 hour period. L'se of the PR/TT shall 
immediately terminate when the in format ion sought is obtained, when the application for 
a court order is denied, or if no court order has been obtained 48 hours after the 
installation of the PR/TT device in emergency situations. 

( Li.VFOUO) As with requesting authorization for an emergency Title III. DOJ prefers for 
the ALISA to contact the DOJ Criminal Division Office of Enforcement Operations 
fQEO) !o request ait emergency PR/TT. After discussions with the AUSA, ihe DOJ 
attorney in consultation w ith the OEO Director or an Associate Director will determine 
whether the statutory requirements have been met, If so, the DOJ attorney will contact the 
appropriate Criminal Division official and obtain authorization to proceed, Once that 

'/e-l^lon failed: 

October 15 zmi 
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approval has been obtained, the DOJ attorney will advise the AUSA that the emerge ncy 
use has been approved, and that the law enforcement agency may proceed with the 
installation and use of the PR/TT. The DOJ attorney will send a verification 
memorandum, signed by the authorizing official, to the AUSA. The AUSA will include 
an authorization memorandum with the application for the court order appruvmg the 
emergency use. 

(U//FOUO) If an emergency situation arises after regular business hours, an attorney at 
DOJ OEQ t Electronic Surveillance Unit (ESU) may be reached through the Department 
of Justice Command Centqr at (202) 514-5000. During regular business hours, the ESU 
may be reached at (202) 5 14-6809; facsimile (202) 6 1 6-8256. 

18,6.9.6 [U) DllRATTOIV OF APPROVE, 

A) (U) FISA: The use of a PR.'TT device may be authorized by (he FISC for a period of time noi 
to exceed 90 days in investigations targeting an L;SPER. Extensions may he granted for 
periods not to exceed 90 days upon re-application co the court. In investigations in which the 
applicant has certified dial the information likely to be obtained is foreign intelligence 
information not concerning a U,S. person (USPERK an order or extension may be for a period 
of time not to exceed one year. 

B) (U) Criminal: The installation and use of a PR/TT device may be authorized by court order 
under 18 U.S.C, $ 3123 fora period not to exceed 60 days, which may be extended for 
additional 60-dfty periods. 

IS .6.9. 7 (U) Specific Procedu res 

(Uj'YFOUG) Prior to installing and using u PR.'TT device ( whether issued in a criminal or 

national security matter}* the case agent must; 

A) (U//FGUO) Coordinate with the technical advisor in advance of seeking approval or court 
order authority for the use of a PR/TT device to discuss required capabilities and submit an 
elect ronic tech me al request form to the technical advisor or the technical supervisor for use of 
the equipment or technique. Before executing the technical request, the technical advisor or 
technical supervisor must ensure that the PR/TT may be affected according to the authorizing 
order or other statutory authority. The TTA is: (i) the primary point of contact for liaison with 
the earner or provider; (ii) responsible for coordinating the intercept: and (ili) will order any 
necessary assistance from Lite provider. 

B) (U-'FOUO) File a copy of each application and the order authorizing use of the PR/TT in the 
pen register sub- tile '"PEN." 

U> (U/ FOUO) Ensure that the court order and cost information is entered into the Technical 
Management Database (TMD) so it can be tracked and managed according to policy 
requirements. 

D) (U/FOUQ) For criminal PR/TT devices, ensure that upon termination of the coverage, the 
information requited to be reported to Congress under 1 8 U.S.C. $ 31 26 is reported to FBIIIQ 
using the Court Order Module in TMD. For all criminal PR/TT orders or extensions issued on 
or after January 1 , 2009. ihe TMD must be used to capture the required report information. 
PR/TT devices used pursuant to consent or under the provisions of FISA arc not included in 
the report to Congress. 
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E) (U7TOUO) Ensure that the data collected is promptly loaded electronically into Telephone 
Applications and any other applicable system., 

i B.6.9.E (U) Use of FISA Derived Information in Other Proceedings 

(U//FOUO) There are statutory (50 U.S.C. Sections 1806. IS25, and 1845) and Attorney 
General (AG) policy restriclions on the use of information derived from a FISA ELS UR. 
physical search, or PR/TT. These restrictions apply to and must be followed by anyone 
“who may seek to use or disclose FISA information in any trial, hearing, or other 
proceeding in or before any court, department, officer, agency, regulatory body, or other 
authority of the United Stales. . . . ,+ Sec DIOG Appendix E for the AG Memo. Revised 
Policy on the Use or Disclosure of FISA Information, dated 01-10-2008. The guidance in 
the AG's Memo establishes notification/approval procedures which must be strictly 
followed. Though not contained in the AG Memo, FBI policy requires that use authority 
be obtained for foreign proceedings as well. Questions concerning the FTSA use policy or 
requests for assistance in obtaining FISA use authority from the AG should be directed to 
NSLB's Classified Litigation Support Unit. 

(U//FGUO) The United States must, prior to the trial, hearing, or other proceeding or at a 
reasonable time prior to an effort to disclose or use that information or submit it into 
evidence, notify the “aggrieved person" [as defined in 50 U,5.C, Sections 1801(h), 
1821(2), or 1 841(2)]. and the court or other authority in which the information is to be 
disclosed or used, that the United Stales intends to disclose or use such information. Sec 
50 U.S.C. Sections 1806(c), 1825(d), and 1 845(e). 

18.6/9.9 (U) Cong ress ion ai Notice and Reporting Requirements 

1 8. 6. 9. 9. l (U) Criminal Pen Register/Tra pand Tra ce- A nnval Report 

((J) The Attorney Genera) is required lo make an annual report to Congress on the number of 
criminal PR/TT orders applied for by DOJ law enforcement agencies. See 18 U.S.C. § 2126. 
The report must include the following information: 

Ai(U) The period of Interceptions authorised by (he order, and the number and duration of any 
extensions: 

B) (U) The offense specified in the order or application, or extension: 

C) (IT) The number of investigations involved; 

D) (U ) The number arid nature of the facilities affected; and 

E) (U) The identity, including ihe district, of the applying agency making (he application and the 
person authorizing the order. 

(U//FQUO) DOJ, Criminal Division, OEO requires the FBI to provide quarterly reports on 
pen register usage. To satisfy DOJ data requirements and standardize and simplify field 
reporting, court-ordered pen register usage must be reported to FBI HQ using the Court Order 
Module in TMD. "Fen Register/Trap and Trace Usage" within five (5) workdays after the 
expiration date of an original order and any extensions, or denial of an application for an 
order, For ail criminal PR/TT orders or extensions issued on or after January I, 2009. the 
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TMD must he used to capture the required report information. These reporting requirements 
do not apply lo PRTT authorized pursuant to consent or under the provisions of FISA. 

18, 6. 9. 9.2 (U) NA TiONAL SECURITY PEN REGISTERS A ND TRAP AND TRA CE - SEMIANNUAL 

(U) The Attorney General must inform the I louse Permanent Select Committee on 
Intelligence. Senate Select Committee on Intelligence. Committee of the Judiciary of the 
House Representatives, and Committee of the Judiciary of the Senate concerning all uses of 
FR.'TT devices pursuant to 50 U.5.C. § 1 846. This report is coordinated through DOJ NSP, A 
semi-annual report must be submitted that contains the following information: 

A} (U)The touil number of applications made Ibr orders approving the use ofPR/TT devices; 

B ) (1?) The tola! number of such orders either granted, modified, or denied;, and 

C) {U)Thp total number ofPR/TT devices whose installation and use was authorized by the 
Attorney General on an emergency basis and the total number of subsequent orders approving 
or denying the installation ami use of such PRTT devices. 

1 8.6.9 . 1 0 { U ) Post Cut-Through Dialed Digits ( PCTD D) 

18,6.9.10*1 (U) Overview 

i l FQEJO) Telecommunication networks provide users the ability to engage in extended 
dialing and/or signaling (also known as "post cut-through dialed digits" or PCTDD), which in 
some circumstances arc simply call-routing information and. in others, are call content. For 
example, non-content PCTDD may be generated when a party places a calling card, credit 
card, or collect call by first dialing a long-distance carrier access number and then, after the 
initial call is "cut through," dialing the telephone number of the destination parly. In other 
instances, PCTDD may represent call content, such as when a party calls an. automated 
banking service and enters an account number, calls a pharmacy’s automated prescription 
refill service and enters prescription information, or enters a call-back number when prompted 
by a voice mail service. See United States Telecom Assn v. Federal Communications 
Commission , 227 E3d 450, 462 {D.C- Cir, 2000). After the initial "cut-through." a pen 
register and the equipment that supports it cannot tell the difference between digits that are 
dialed to connect a call and those that would otherwise be considered content. 

i U FOLD} The definition of both a pen register device and a trap and trace device provides 
that the information collected by these devices '’shall not include the contents of any 
oomnnnlicatioiiT Sec 18 U.SC §3127(3} and (4). In addition, IS U S C. § 3121(c) makes 
explicit the requirement lo "use technology reasonably available" that restricts the collection 
of information "so as not to include the contents of any wire or electronic communications. 1 " 
"Content" includes any information concerning the substance, purport, or meaning of a 
communication. See IS U.5.C. § 25 10(8). When the pen register definition is read in 
conjunction with the limitation provision, however, it suggests that although a PR/TT device 
nay not be used for the express purpose of collecting content, the incidental collection of 
content may occur despite the use of "reasonably available" technology to minimize, to the 
cniem feasible, any possible over collection of content while still allowing the device to 
collect all of the dialing and signaling information authorized. 
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(LV/FOUO) DOJ Policy: In addition to this statutory' obligati on. DOJ lias issued a directive in 
the form of a DAG Memo (see below paragraph) to all DOJ agencies requiring (hat no 
affirmative investigative use may be made of PCTDD incidentally collected that constitutes 
content, except in eases of emergency — to prevent an immediate danger of death, serious 
physical inj ury, or harm to the national security. 

(U//FOUO) Although the DAG Memo , dated May 24. 2002 on “Avoiding Collection and 
Investigative Use of "Content" in the Operation of Pen Registers and Trap and Trace 
Devices*” as written, applies only to the issuance of criminal pen register orders pursuant In 
18 U.S.C, § 3121 ct seq., the potential collection of PCTDD-eontcnt also exists for pen 
registers authorized under FISA. As such, the principles outlined in the DAG Memo apply to 
pen registers authorized pursuant to the FISA as well as pen registers authorized pursuant to 
Title 18 of the United States Code, In instances in which PCTDD arc collected pursuant to 
FISA, the government may nol make any affirmative investigative use of the 
information, even in cases of emergency, without nufhurD-ation from the FISC. Ary such 
emergency use must be recorded in the respective investigative Files. 

1 8. 6 . 9.10,2 (U) Collection of PCTDD 

(U//FOUO) When requesting pen register collection, the field office case agent must 
affirmatively decide whether lo receive PCTDD during the course of a pen register collection, 
If no selection is made, the default is set not to collect PCTDD. 

A) (U/AFOUQ) The case agent shall, consistent with DIOG Section 1 8.6.9, 1 0,1, submit an 
electronic technical request form that stales whether PCTDDs are lo be collected — for 
example, when the order authorizes the "recording or decoding of all dialing, routing, 
addressing, or signaling informal ion." This selection is accomplished by marking (he |f Post 
Cut through Dialed Digite Authorized 11 check box for each monitored target. If this selection is 
not made, the PCTDD will not be collected or presented in any collection report. 

B) (LV/FOUO) The case agent shall advise the technically teamed agent (TTA) promptly upon 
learning that a particular pen register order expressly prohibits the collection or retention of 
PCTDD, The technical agent shall then take all reasonable steps lo ensure compliance with the 
restrictive order, including coordinating with the service provider and with GTD personnel 
regarding the use of technology reasonably available to avoid the collection of all PCTDD. 

18.6.9.103 (V) Use of PCTDD 

(U//FGUO) If PCTDD InfomfitiMon is collected pursuant to an authorized pen register, the 
following steps must be taken, by all FBI personnel when reviewing pen register derived 
information to avoid the use of the contents of communications that may he contained within 
the string of digits: 

A) (U//FOUO) Prior lo examining any PCTDD. identify — through use of administrative 
subpoena or otlier investigative means the subscriber of the phone number to whom the 
initial connection was made (Le., the origination number). 

1 } (U//FQLO} If the origination number does not appear lo be pertinent to the investigation, 
no examination of any PCTDD associated with that initial phone number shall be made, 
absent an investigative need, to examine the PCTDD. 


Ortotmr ] Jo 
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2) (U//FOLO 3 If ihe initial connection is determined to be to a financial insliluii on as defined 
in line Right td Financial Privacy Act, 12 LLS.C. £ 3401(1 ), PCTDD may not be examined, 
because there is reason to believe that the PCTDD may contain the contents of a 
communication, such as a bank account number. 

J) (IJ.'/FOUO) The fovt that the (ar^d called (he bank, however, can be used for investigative 
or intelligence purposes, such as to subpoena bank records associated with the target; but 
any PCTDD cannot be used in the subpoena (such as a bank accouni number) or later 10 
confirm information received from the bank. 

4) (UtfFOUQ) II ihe initial connection is determined to be an entity for which it is reasonable 
to believe that the PCTDD would contain dialing or signaling information, such as a 
calling card number a call spoof card service, a company otherwise providing direct access 
to a telephone service, or a business entity, tiie PtTDP may be examined to identify the 
ultimate destination of the call, or any other associated signaling or routing information, 
such as a calling card PIN or calling card account number. If the initial connection is to a 
business entity, like a hotel, for example, the PCTDD may be examined to determine if an 
extension number was dialed. 

5) (U//FOUO) If. when examining PCTDD, numbers are encountered that constitute 
“COrttmf' Of a communication, except as provided below, those numbers may not be used 
for any affirmative investigative purpose. In essence, those numbers must be treated as 
though they did not exist and cannot be used for any purpose. To the extent the information 
is included in any document for analytic or investigative use, the PCTDD numbers shat 
constitute “content" must be redacted. 

Bi EUi'VFOUO) Emergency Use: In an emergency, PCTDD that constitutes content may be used 
as necessary in criminai investigations to prevent immediate danger of death, serious physical 
injury, or harm to the national security. In instances in which PCTDD are collected 
pursuant to FfiSA, the government ma\ nnr make ain affirmative investigative use of the 
information, even in cases of emergency, without authorization from the FISC* 

1} (U//FOUO) Aiwrtn'uf ; In criminal investigations only, an SSA orSIA„ who reasonably 
determines that an emergency situation exists that requires the use of PCTDD content 
relating to the emergency, may approve the use of such PCTDD without delay. 

Z\ (U FOLIO) ygfificatiorr : Within five (5 f business days of such emergency use, the use of 
the particular PCTDD content must be documented in an EC to the appropriate 
investigative files (i.e., the investigation in which the pen register information was derived 
and the investigation in which it was used) with notification lo the CDC and the FBI 
General Counsel, OGC ( Investigative Law Unit for criminal pen registers and National 
Security Law Branch lor FISA pen registers). 

; 8 6 9 i0 4 (U) Wha t constitutes PCTDD content 


Qlln applying the above, the term “content" is interpreted to mean “any information 
the substance, purport, or meaning of a communication" as defined in 18 U.S.C § 
Questions concerning whether specific PCTDD arc content as opposed lo dialing, 
addressing, or signaling information should be addressed to the CDC or OGC for 
on w ith DOJ as necessary. 

Fxempiiim : This policy does not pertain to e-mail or Internet account pen register 
: because: such electronic communications do nol generate PCTDD. Nor docs the 
re ram to PCTDD obtained pursuant to a Title III or FISA electronic surveillance 
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order, because such orders authorize the interception of contents of communications 
associated with the targeted phone number. 

18.6.9.11 (U//FOUO) Cell Site Simula mm /D igital An alvzers/ Wireless Intercept 

Tracking Technologv 

(U//FOUO) A PR/TT order is required \ absent consent of the wireless phone user) for the FBI 
to use equipment to capture any "signaling information" 1 — including the Mobile Station 
Identification Number (MS IN) and Electronic Serial Number (ESN) or other registration-type 
data emitted from a wireless phone into the public airspace — ever though this can be 
accomplished without the assistance of the service provider. Because 18 U.S.C. § 3-127 
defines PR/TT devices in terms of recording, decoding or capturing dialing, routing, 
addressing, or signaling information, die government’s use of its own device to capture such 
signaling data whether passively monitoring or actively interrogating- constitutes the use of 
a "pen register” device and requires an order or statutory exception to avoid violating the 
statute. The following discusses how wireless intercept tracking technology (WITT) is used: 

1 8r 6r 9r 1 L 1 (U//FOUO) To L uca TE a Known Phone Number 

A) [U'/FQUO) . iuttnyritv ? A standard PR/TT order issued pursuant to IS U.S.C. $ 1127 is 
adequate to authorize t he use of this technology to determine the location of a know n targeted 
phone, provided' that the language authorizes FBI employees to install or cause lo be installed 
and use a pen register device, without geographical Si mi (at ion. at any time of day or night 
within (X) days from the dale the order is signed, to record or decode dialing, routing, 
addressing, or signaling information transmitted by the “Subject Telephone." Due to varying 
and often changing court interprelafiom nf the requirements for obtaining cell site location 
information, agents contemplating legal process to obtain such information should consult as 
necessary with their CDC and/or A USA for the legal requirements in their particular 
jurisdiction. The application and order should generally also request authority to compel 
disclosure of cell site location data on an ongoing basis under 3 8 U.S.C’. § 2703(d) — or 
probable cause, if such is required by the particular dislrict court — as such information may 
assist in determining the general location of the targeted phone. FISA PR/TT orders do not 
currently authorize the collection of cell site location information. 

B) [ LI //FOUO t Surveillance aid : Traditionally, this equipment has been deployed only as a 
surveillance aid. Using the results as evidence is generally discouraged because of the level of 
technical expertise required to effectively operate the equipment. Accordingly, FBI employees 
should corroborate and verify the information obtained through other means (e.g., pretext 
calls. CMS information, and M-ST surveillance) that can be used as evidence in any court filing 
(c.g., Title 111 affidavit, search warrant affidavit}. FBI employees may not make affirmative 
investigative use of signaling information inadvertently acquired that is known to have 
emanated from a private residence, unless il is necessary to prevent an immediate danger of 
death, serious physical injury, or harm to the national security, 

C) (U//FOUQ) Targeting a nuidt'itce : The deliberate use of this technology to determine 
whether a targeted phone is operating within a particular residence could be deemed to 
constitute a search under the Fourth Amendment. There is, however, currently no specific 
decision on point. The sale and use of this type of equipment is controlled as “surreptitious 
interception" equipment under 1H $ 2? 1 2. Accordingly, its authorized use is typically 
restricted lo law enforcement Or government and service providers for use in the normal 
course nf business, h is likely, therefore, that such equipment would not he considered ,r in 
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general public useC Under Kvllo v« United States. $33 U.S. 27 (2001 |. the use of equipment 
not in general public use lo acquire data thus is nol otherwise delectable that emanates from a 
private premise implicates the Fourth Amendment. If so. the use of such equipment to target a 
particular residence to determine whcihcr a particular cellular phone is operating inside the 
residence would constitute a search for purposes of the Fourth Amendment, 

D) l. (U//FOUO) In the absence of clear law. such equipment should not be intentionally used to 
target a private premise to determine whether a particular targeted phone is operating inside 
nor be used to determine whether a targeted cellular phoaie is operating from within a 
particular private premise, absent consent, exigent circumstances or a search warrant for the 
phone (a search warrant an liras circumstance would be similar to an anticipatory search 
warrant Fora tracking device). Prior consultation with the AUSA involved in the investigation 
concerning the particular factual circumstances, however, may result in a determination that a 
warrant is not necessary, in the event a search warrant is obtained, consideration should be 
given to requesting delayed notice f 1 S U.s.f, £ 3103a), to relying on corroborating techniques 
to confirm the existence of the phone, and to claiming a privilege against disclosure of the 
investigative technique based on the likely adverse result such disclosure would have on the 
future viability of the technique tbr investigations. 

18.6.9.1 1.2 { U//FOUO ) To IDENTIFY AN UNKNOWN TARGET PHONE NUMBER 

(U//FOUO) Authority : A pen register order is required when this technology is used to 
identify an unknown target phone number, The pen register application should explain that 
the device is used to delect registration signaling data from multiple phones, to include non- 
target phones, at locations in which the target telephone es reasonably believed to be operating 
and then the recurrence of a common number is correlated lo the presence of the target. Once 
the target number is i dent i lied, all non-target numbers urc to be purged in order to protect the 
privacy of those non-targets, as. well as to preserve promptly the operational use of the 
equipment. Hence, all hough the non -target data may be temporarily acquired, it is not 
maintained beyond that necessary to effect the pen register. e.g.. to identify the targeted 
phone. No affirmative use of such incidentally acquired non- target data is permitted. 

(U//FOUG) If active interrogation is to be used to identify a target phone, the pen register 
application should also advise the court of the potential For temporary disruption of service 
and stale that, e.g.. ''any potential interference to service occasioned by use of the Pen 
Register or Trap and Trace will be minimized so as to be no more disruptive than might 
ordinarily ueeur with cellular service coverage. 1 ' (Note that there is no Interference when the 
. dc\ icc is used to passively monitor RF signals,) A temporary disruption can be caused 
because when a phone registers with the device, it cannot simultaneously register with the 
provider's network. Consequently, the phone may experience a temporary disruption in 
service during the brief time lhat it is "registered" with the device not unlike a typical lapse 
in cellular service occasionally experienced by the average cell phone user (c.g., dropped 
calls). Such a brief delay in coverage may be considered so de minimis as lo be legally 
in significant, Nonetheless, informing the court in the application of the potential for 
interference serves two objectives: 

A) (U //FOLIO) Addresses the pen register statutory requirement thai a pen register device be 
installed and used "with a minimum of interference with the services" accorded tti (he target of 
(he pen register ( lfc U.S.C. £ 3 124(a)); and 
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B) (U.'VFOUO) Addresses poluntial claim based on Section 333 oflitlc 47 of the United Stales 
Code, which provides 'No person shall willfully or maliciously interfere with or cause 
interference to any radio communications of any station licensed" by the FCC— to include 
commercial cellular frequencies. This prohibition is arguably inapplicable to (he use of this 
device by the government because the government is not included within the definition of 
"person," See 47 U,S,C. § 153(32). 

1 8.6,9. 11.3 (V) PR/TT ORRER LANGUAGE 

(U) The language in the order should state that "the pen register will be implemented 
unobtrusively and with mini mum interference with the services accorded to customers of 
such service." 
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18,6,10 (U) IVVESTIGA Tl VE METHOD l MA IL COVERS 

18.fi. 10.1 (U) Summary 

(U) A mail cover may be sought only in a Predicated Investigation when there are reasonable 
grounds to demonstrate that the mail cover is necessary to: (i) protect the national security; |ii ) 
locale a fugitive; (iii) obtain evidence of the commission or attempted commission of a 
federal crime; or (iv) assist in the identification of property, proceeds or assets forfeitable 
because of a violation of criminal law. See 39 C.F.R. § 233.3(e)(2), 

(U| Subject to the requirements in this section, a criminal or national security mail cover may 
be sought on any person or entity, including but not limited to the subject of the investigation, 
when there are reasonable grounds to believe ills necessary to achieve one or more of the 
above- f isted goals and the results of the mail cover are reasonably anticipated to be "relevant 
to 11 the Predicated Investigation. 

f LJ) A mail cover may be sought only from the United States Postal Service I USPS); a mail 
cover may not be requested from package carriers (e,g.. Federal Express, United Parcel 
Service) that do not handle mail processed through the USPS- Nor may mail covers be 
requested from the military postal system overseas or from persons performing military postal 
duties overseas. As a general rule, a mail cover in the APO/FPD system overseas may only be 
ordered by a military authority competent to order searches and seizures for law enforcement 
purposes, usually a commanding officer. See DOD 45 2 5. 6- M, the DOD Postal Manual. 

1 8.6. 10.2 ( U J Appi.iC4.TION 

(U//FDUQ) Mail covers may be used in Predicated Investigations, to include those opened to 
provide assistance to other agencies (consult the CDC or FBIHQ QGC for further guidance 
for assistance to other agencies). A mail cover cannot be used to collect positive foreign 
intelligence. A mail cover cannot be used during an Assessment. 

18.6.10.3 (U] Legal authority 

A HU) Postal Service Regulation 39 C.F.R, $ 233.3 is the sole authority and procedure for 
opening a moil cover and for processing, using and disclosing information obtained front a 
mail cover, 

El| (U) There is no Fourth Amendment protection for information on the outside of a piece of 
mail. See. e.g, U.S. v. Choate . 576 F.2d 1 65, 1 74 (9 ,h Cir. t 1 978); and U.S. v. Huic . 593 F.2d 
34 (5 lh Cir. F 1979); and 

C) (U) AGG-Dont Part V.A.2, 

18.6.10.4 ( U) DEFINITION OF INVESTIGATIVE METHOD 

(LI) A mail cover is the non -consensual recording of any data appearing on the outside cover 
of any sealed or unsealed mail matter to obtain information in order to: 

A HU) Protect the national security; 

B) (U) Locate a fugitive; 


18-135 

UNCLASSIFIED FOR OFFICIAL USE ONLY 


Version Dated: 
October 15, 2011 


UNCLASSIFIED FOR OFFICIAL USE ONLY 
§1 8 Domestic Investigations and Operations Guide 

C) (U) Obtain evidence of commission or attempted commission of a federal crime: 

D|i (U) Obtain evidence of a violation or attempted violation of a posial statute; or 

E) (U) Assisi in the identification of property, proceeds or assets forfeitable under law. 

See &C F-Mm3(c)(l). 

{ U > In this context, a “recording" means the transcription, photograph, photocopy, or other 
facsimile of the image of the outside cover, envelope, or wrappers of mailed matter. A 
warrant or court order is almost always required to obtain the contents of any class of mail, 
sealed or unsealed. 

18 . 6 . 10.5 (U) Standard fon Use and Approval Requirements fdr Investigative 

Method 

(U) The standard lt> obtain a mail cover is established by the Postal Service regulation. The 
Chief Postal Inspector may order a mail cover ”[w] hen a written toques! is received from any 
law enforcement agency in which the requesting authority specifies the reasonable grounds to 
demonstrate the mail cover is necessary to: 

A! fUj Protect the national security; 

B) (U) Locate a fugitive; 

t) (U) Obtain information regarding (he commission or attempted commission of a crime; or 

D) (U) Assist in the identification of property, proceeds or assets Ibrfei table hccause of a 
violation of criminal law.” See 29 C.F.FL § 233.3(cK2:) 

(Ui/FOUOj .\utimiat Security A fail Covi'r : A national .security mail cover request may be 
approved by the field office ADIC or SAC or at Headquarters by the EAD of the National 
Security Branch. A national security mail cover sought “to protect the national security” 
includes protecting the United Stales from actual or threatened attack or other grave, hostile 
act; sabotage; international terrorism; or clandestine intelligence activities, including 
commercial [economic] espionage by foreign powers or their agents, 

(UtfFOUO) After SSA approval, a national security mail cover request must be reviewed for 
legal sufficiency by an FBI attorney (i.e,. CDC. ADC. or OGC NSLB attorney) before it may 
be approved by an ADIC or SAC (including anyone who is officially in an acting ADIC or 
SAC capacity! or the EAD of the National Security Branch (approval cannot be delegated). 

(U//FOUO) Required Form : The FD-lQ64a must be used for all National Security Mail 
Covers. 

{Ui'/FQUOI Criming Mail Cow ; A criminal mast cover request may be approved by the 
Held office 5SA. The SSA may approve a request for a mail cover if there are reasonable 
grounds to demonstrate that the mail cover is necessary to assist in efforts to: f ii locate a 
fugitive; (ii) obtain information regarding the commission or attempted commission of a 
federal crime; or (til) to assist in the identification ol'pn>pcrty, proceeds or assets forfeitable 
because of a violation of criminal law. 

(U/-FOUO) ttmtund Form : fhe 1 1>- 1 U64 must be used for all Criminal Mail Covers, 
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(U 7FOUO I Review and Aiwrovaf afSatfonaf Security or Criminat Mail Cover Remem ; 
Approval of any mail cover request or extension is conditioned on the following criteria being 
met: 


A) (U//FOUQ) The request states a reasonable ground to demonstrate the mail cover is necessary 
to: (i) locate a fugitive; cii) obtain information regarding the commission or attempted 
conamission of a federal crime: (iii) assist in the identification of property, proceeds or assets 
forfeitable because or a violation of criminal law; or (iv) protect the national security, 

H) (Uf/FOUO) The request for the mail cover includes the full name and complete address, lo 
include postal ZIP Code, if known, of the mail lo be covered. If the name oft he mail recipient 
is unknown, the request includes an explanation of why obtaining information regarding mail 
addressed to the targeted address is necessary to accomplish the authorized objective of the 
mail cover, If other individuals using the same address are not to be covered, the request 
includes those names and the fact that they should be excluded from coverage. 

C) (U//TOUO) In a national security investigation, if a mail cover is requested on an 

organization, the request slates, if known, whether the organization is organized under the 
laws of (he United States or foreign laws and whether any United States persons (USPERs) or 
non-Uni ted States persons fnon-USPHRs) work there. The request speeifically names USPERs 
not to be covered, if appropriate, If the subject is a foreign establishment or corporation, the 
request lists and excludes, if necessary. (Ik USPERs working in the establishment, to the 
extent the information is known. 

D» (U//FQUO) If the request is to obtain information regarding the commission or attempted 
commission of a federal crime, the request: (i) cites the specific criminal statute, with a 
description of the violation, the penalty for the violation, and the nexus between the 
investigation and each address/subjeci; {iiS sets forth how the subject of the mail cover is 
violating the statute or how the subject is otherwise connected to the investigation; and (Lit) 
explains how the mail cover will facilitate the investigation, c.g,. identify the location of 
property or assets for forfeiture by revealing banking information. 

Ej (UV/FOUO) The request describes the classes of mail to be covered, including w hether 
outgoing and/pr incoming mains to be covered. Classes of mail to be covered beyond first 
class must be specifically requested and justified according lo the "reasonable grounds" 
standard articulated in the Postal Service regulation. See 39 C.F.R. § 233. 3< eK 2), 

F) (U//FOUQ) If the subject of the mail cover is represented by legal counsel or under 

indictment, the request provides the name and address of legal counsel, if known. Under postal 
regulations, a mail cover must not include matter mailed between the mail cover subject and 
the subject's attorney, unless the attorney is also a Subject under the investigation. 

G| (U//FOUO) The request slates the duration lor which the mail cover is requested and notes 
that the authorized period begins on the date the request is instituted by the local post office. 

H) ( U/i'FOUO) The request species the name and address of the individual lo whom the results 
of the mail cover should be forwarded. 

I ) ( U/TOUO) The request specs ties mechanical reproduction (photocopying) only when 
necessary and, if photocopying is requested, must include a statement to the effect that: 'The 
nature of the language or venting on envelopes often makes it difficult to transcribe;" 1 or, in 
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exceptional cases, a statement to the effect than ''Because the return address and other 
physical features of some envelopes addressed to the subject arc known to eonlain secret 
writing and/or clandestine instructions, it is requested that this tnaiS cover include mechanical 
reproduction of both sides of all first class and priority envelopes addressed lo the subject." 

(Ul bmewem'Y Reattew r ; When time is of the essence, the Chief Postal Inspector, or 
designee, may act upon an ora! request to be confirmed by the requesting authority, in writing, 
within three calendar days. Information may be released prior to receipt of the written request 
only when the releasing official is satisfied that an emergency situation exists. See 39 C.F.R. § 
233 . 3 ( 0 ( 3 ), 

(U) An “emergency situation 1 " exists when the immediate release of information is required to 
prevent the loss of evidence or when there is a potential for immediate physical harm to 
persons or property. See 39 C.F.R. § 233.3(eH 10}. 

18.6.10.6 (U) Duration of Approval 

A) f U) Xatianat Security Mail Covers : No national security mail cover may remain in force for 
longer than 1 20 Continuous days unless personally approved for further extension by the (Chief 
Postal Inspector or higher designees at National Headquarters. See 39 C.F.R. § 233.3(g.Xb). 

B) tU I Criminal Mail Cwm f.M t'rt F withe* ; A mail cover in a criminal investigation is 
limited to no more than 30 days, unless adequate justification is provided by the requesting 
authority. See 39 C.F.R. § 233.3(g)(5).. Renewals may he granicd for additional 30-day 
periods under the same conditions and procedures applicable to the original request. The 
requesting authority must provide a statement of the investigative benefit of the mail cover 
and anticipated benefits to be derived from the extension, 

C) (LI) Fugitivea : No mail cover instituted to locale a fugitive may remain in force for longer 
than 120 continuous days unless personally approved for further extension by the Chief Postal 
Inspector or his/her designees at National Headquarters. Sec 39 C.F.R. § 233.3fgHG). 

D! (U ) Exwptum far hidhuwtiH and Mvrmulhm : Except for fugitive investigations, no mail 
cover may remain in force when an information has been filed or the subject has been indicted 
For the matter for which (he mail cover Ims been requested. If the subject is under investigation 
for further criminal violations, or a mail cover is required to assist in the identification of 
property, proceeds or assels forfeitable because oT a violation of criminal law-, a new mail 
cover order must he requested. See 39 C.F.R. § 233.3(g)(7). Any mail cover results pertaining 
to the subjects) provided by (he USPS a Iter an indictment or information is filed cannot be 
used for investigative purposes or uploaded by the FBI (other than the exception regarding 
fugitives), and shall be returned promptly to the USPS. 

18.6.10.7 (U] Storage gf l mail Cover information 

(U//FOUO) The Postal Regulation requires that physical storage of all reports issued pursuant 
to a mail cover request to be at the discretion of the Chief Postal Inspector. See 39 C.F.R. § 
233.3 (h)( I V Accordingly. FBI employees must conduct a timely review of mail cover 
documents received from the USPS. A copy of the signed mail cover request and the signed 
transmittal letter must be maintained in the investigative file. 
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1 8.6 J 0.8 [ U) Retu r iv of Mail Cover I neokm attd iy to USPS 

(UVFOUO) Current USPS policy guidance fora mail cover in a criminal investigation 
requires return to the USPS of all documentation provided by the USPS in a mail cover and 
prohibits copying and retention of these documents. The documents, should be returned to the 

USPS alter nna!a$odicatmmd/or the dosing of the mvesti&tian: rAe fat fat matm * k 

*' ac retumed IJSPS mu « be documented in the investigative Hk. This policy guidance 
does not apply to a national security mall cover. 

1 8. &. 1 0.9 f uj CoMPii am C£ a ivr> Mom i toning 

(L I QUO] FBI employees must conduct a timely review of mail cover information received 
from the USPS for any potential production of data beyond the scope of the requested mail 
cover (“overproduction"). Overproduced information from a mail cover must not be uploaded 
into any FBI database or used in any manner. 

A) |t FOUO) Lrimitmi \f ait Ctwer - OvtTproiiuftian : Overproduced information must be 
returned with a Idler to the aligned to the USPS entity from which it W'&s obtained stating the 
rensonfs] for the return. Destruction of the overproduced material is not an option under the 
current Postal regulations. 

6) 1 1 ’ N H.K >:■ \uti{mul Set uritv Mail (over - Overtiroduqum : Overproduced in formal ion in 
national security investigations must either be destroyed or relumed to the USPS cnlily tbit 
produced it at the discretion of the field office or HQ division which requested the mail cover 
If the information is retumed. it must he accompanied with a letter to the USPS enlity which 
produced the materials stating the rouwnfe) for the return of the information, if the 
information is to be destroyed, the supervisor responsible for the investigation must approve 
the destruction and its scope, This decision must be documented in an EC to (he investigative 
Hie. 
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18,6,11 (U) INVESTIGA Tt VE METHOD l POL YGRAPH EXA MINA TIONS 

13.6.1 1.1 (U) Summary 

(XJ//FOUO) The polygraph examination is used in Predicated Investigations to: (i) aid in 
determining whether a person has pertinent knowledge of a particular matter under 
investigation or inquiry; (iij aid in determining the truthful ness of statements made or 
information furnished by a subject, victim, witness. CHS, or an individual making allegations: 
and t iiif obtain information leading to the location of evidence, individuals or sites of offense. 

(U//FOUD! Polygraphs are administered only to those who agree or volunteer to take the 
exami nation. An examination is conducted only when the examiner, in his/her professional 
judgment, believes the results will be accurate. All examinations must be conducted under an 
investigative file number. 

(U//FOUO) This policy does not limit other authorized uses of polygraph method outside of 
Assessments or Predicated Investigations, such as the FBI's responsibilities to conduct 
background checks and inquiries concerning applicants and employees under federal 
personnel security programs, 

10.6.1 L2 (U) Application 

(U//FOUO) This investigative method may be used in national security investigations, 
criminal investigations and positive foreign intelligence collection investigations, and for 
assistance to other agencies when it is not otherwise prohibited by AGG-Dom, Part EII.B.2-3. 
This method cannot he used during an Assessment, with the exception of Type 5 
Assessments. See DIGG Section 5.6.3AS and the IPG for the policy governing the use of 
polygraph examinations during a Type 5 Assessment. 

1 B.6. 1 1,3 { U ) Lt g al Autho rity 

(U) AGG-Dom, Part V.A.6. 

18.6.11.4 (UJ Standards for Use and Approval Requirements for Investigative 
Method 

(Ui'VFOUO) An SSA may approve the use of a polygraph if: 

A) (U//FQUO) The individual agrees to or volunteers to take die examination!; 

B) ELV/FOUO) The examiner, in higher professions l judgment, believes the results will be 
accurate; and 

C) (LV/FOUO) The investigative method is reasonably likely to achieve investigative objectives. 

18.6.1 1.5 (U) Duration of Approval 

(U.VFOUO) Polygraph examinations may be administered only to individuals who agree or 
volunteer to take an examination. The polygraph can be administered as long as the individual 
continues to agree to the examination, and the examiner, in his/her professional judgment. 
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believes the results will be accurate based upon an evaluation [assessment] of the physical and 
mental fitness of the examinee to undergo the examination- 

l a .6. 1 1 .6 (U) Speci fic Procedures 

(UjVFQUQ) An FC must be prepared requesting SSA approval for the polygraph. If an A USA 
is assigned to the investigation, an FRI employee must confer with the US AO to discuss any 
prosecutorial issues prior to the administration of a polygraph. 

1 a.6. 1 1 .7 (LJ) Compliance and Monitoring 

(Uv'/FOUO) All polygraphs conducted in Predicated Investigations must he documented in the 
investigative file. Those polygraph examinations conducted in a Type 5 Assessment must he 
documented in the Assessment file. 
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18. 6.12 (U) Investigative Method: Trash Covers (Searches tha tDo Not 

Require a Warrantor Court Order) 

1B.6.121 (U) Summary 

(U) The Fourth Amendment to the United States Constitution prevents the FBI From 
conducting unreasonable searches and seizures. It also generally requires a warrant be 
obtained if the search will intrude on a reasonable expectation of privacy. To qualify as a 
"reasonable expectation of privacy,” the individual must have an actual subjective expectation 
of privacy and society must be prepared to recognize that expectation as objectively 
reasonable. See Kalz v. t nilcd States . 389 U S. at 361. If an individual has a reasonable 
expectation of privacy, a warrant or order issued by a court of competent jurisdiction or an 
exception to the requirement for such a warrant or order is required before a search may be 
conducted. Physical searches of personal or real property may be conducted without a search 
warrant or court order if there is no reasemahle expectation of privacy in the property or area. 
As a general mailer, there is no reasonable expectation of privacy in areas that are exposed to 
public view or that are otherwise available to the public, 

tU'/FQUQ) Note: Consent Searches are authorized in Assessments, as well as in Predicated 
Investigations. 

< L) A reasonable expectation of privacy may be terminated by an individual abandoning 
property* setting trash at the edge of the curtilage or beyond for collection,, or when a private 
party reveals the contents of a package. However, the AGG-Dom and FBI policy have 
restricted the use of "trash covers” to Predicated Investigations as set forth in this section. 

16,6*12.2 fll) Application 

iU FOUOl The FBI may conduct trash covers, as defined below in Section 18 6. 12.4.1, in 
Predicated Investigations. This investigative method may be used in national security 
investigations, criminal investigations, foreign intelligence collection investigations, and for 
assistance to other agencies w hen it is not otherwise prohibited by AGG-Dom. Pan II I. B. 2-3. 

U FOUOi This method cannot be used during an Assessment, with the exception ofa Type 
5 Assessment, (See DJOG Section 5,63,4,81 

18.612.3 [It] Legal Authority 

A) (U) AGG-Dom, Part V.A.3, 

B) (U) Fourth Amendment in (he United Slates. Constitution 

18.612.4 (U) Definition of Investigative Method 

t fl,6. 12.4.1 (U) DISTINCTION BETWEEN " TRASH COVERS' AND SEARCHES OF ABANDONED 

Property or Trash 

A) ( U FOUO) Trash Cover: The intentional search uf a specific person ’s (rash ((hat is located at 
the place Ibr collection}, whether from a home or business, designed to find information 
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relevant Id an ongoing investigation when no reasonable expectation of privacy exists. A trash 
cover is a targeted effort to gather information regarding a particular person or entity by 
reviewing that person or entity's refuse. Generally, a trash cover is a planned in advance 
activity based upon information obtained (hat ft specific inish container will contain evidence 
or intelligence of an investigative interest, and that such activity will occur over aspect lied 
period of time. 

B) (Li.'7FOUO) Seun li itf iiwtiJirm'ii I't/wm ur Tni\h : A search of abandoned property or 
trash that has been placed in a publicly accessible garbage container is not a "trash cover'" 
under the defi nation above. ]f an FBI employee observes an individual abandoning something, 
for example, in a publicly accessible garbage can. or observes possible evidence of a crime or 
something of intelligence value in a public trash receptacle, the FBI employee may recover the 
item(s) without having an Assessment or Predicated Investigation open at that time. 

18r6.12A.2 (U) Determma raw of an Arf.a of CVzjit/m cf Around a H ome 

{U} Whether an area is curtilage around a home is determined by reference to four factors: | i| 
proximity of the area in question lo the home; (si) whether the area is within an enclosure 
surrounding the home; (iii) nature of the use to which the area is put; and (ivi steps taken to 
protect the area from observation by passers-by. 

(U) An area is curtilage if it is so intimately tied to the home iLself that it should be placed 
under the home’s umbrella of Fourth Amendment protection. 

18.6.12.5 (U) Standards for Use and Approval Requirements for Jnvfstigative 

Method 

(U7FOU0) SSA approval is required for the use of this method. However, if there is a doubt 
as to whether a person has a reasonable expectation of privacy in the area to be searched, the 
employee must consult with the CDC or QGC to determine w lieiher a search warrant is 
required. Use of (his method must be documented in the investigative file. 
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l *1,6.13.1 (U} Summary 

(U//FOUO) The undercover method of investigation, including use of proprietary business 
entities, is essential to the FBFs capabil ity to covertly gather evidence and intelligence that 
will allots tor the detection, disruption, prevention, and prosecution of individuals and 
enterprises that engage in criminal conduct or that pose a threat to the national security. The 
method inherently involves deception and may require cooperation with persons whose 
motivation and conduct are open to question. Accordingly, this method should be carefully 
considered and monitored throughout its use. 

| U/i'FOUO jl Undercover operations must he conducted in conformity with The Attorney 
General's Guidelines an Federal Bureau of Investigation Undercover Operations ( AGG- 
UCQ) in investigations relating to activities in violation of federal criminal taw that do not 
concern threats to the national security or foreign intelligence. In investigations that concern 
threats to the national security or foreign intelligence, undercover operations involving 
religions or political! organizations must be reviewed and approved by FBI Headquarters, with 
participation by the NSD in the review process. (AGG-Dom, Part V,A,7) Other undercover 
operations involving threats to the national security or foreign intelligence are reviewed and 
approved pursuant to FBI policy as described herein. 

lU FOUO) AppUccttion ; This investigative method may be used in national security 
investigations, criminal investigations and positive foreign intelligence collection 
investigations, and for assistance to other agencies when it is not otherw ise prohibited by 
AGG-Dom, Part IILB.2-3, This method cannot be used during an Assessment. 

13.6.13.2 (U) Legal Authority 

A) (U) AGG-Dom, Part V.A.7 

B) (L) AGG-UCO 

1 3,fi. 1 3.3 [U) Definition of Investigative M ethod 

A) f UAT'OUt-)) l nd? reaver -IrfmOv An "undercover activity” is any investigative activity 
involving the use of an assumed identity by an undercover employee for an official purpose, 
investigative activity, or function. An “undercover employee" is an employee of the FBI, 
another federal, state, nr tncat law enforcement agency, another entity of the US.EC, or another 
foreign intelligence agency working under the direction and control of the FBI whose 
relationship with the FBI is concealed from third parties by the maintenance of a cover or alias 
identity for an official purpose, investigative activity, or function. 

B) (U .'FOLIO 1 1 tiiit'nuMsr Ope rut in ts : An ‘'undercover operation” is an operation that involves a 
series of related “undercover activities" over a period of time by an ''undercover employee" A 
series of related undercover activities consists of more than live separate substflXtttve contacts 
by an undercover employee with the individuals under investigation. In Investigations relating 
to activities in violation of federal criminal law that do not concern threats to the national 
security or foreign intelligence, undercover activity involving sensitive circumstances, which 
are listed in the AGG-UCO and the FGUSO, constitutes an undercover operation regardless of 
the number of contacts involved. A substantive contact is a communication, whether by oral. 
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written, wire, or electronic means, that indudes information of imrestigpiivc interest, Mere 
incidental contact fe.g., a conversation that establishes an agreed time and location tor another 
meeting) is not a subsianiive contact within the meaning of this policy. 

1 8. 6.13.3 '♦ 1 (U) Distinction Between Sensitive Circumsta nce and Sensitive Invest iga ti ve 

Matter 

(Tjy/FGUO) The term “sensitive investigative matter 11 as used in the AGG-Dom should not be 
confused with the term “sensitive circumstance” as that term is used in undercover Operations 
or ELSUR matters. The term sensitive circumstance relates to a circumstance that arises in an 
undercover operation that requires the ECO to obtain FBI HO approval. A comprehensive list 
of sensitive circumstances for criminal activities is contained in the AGG-UCO and for 
national security matters in the National Security Undercover Operations Policy 
Implementation Guide (NSUCGPG). The Crimitjal Undercover Operations Review 
Committee (CUORC) and the national security Undercover Review Committee (UCRC) must 
review and approve undercover operations that involve sensitive circumstances. The detailed 
policy for undercover operations is described in this section of the DIQG, the Field Guide for 
Undercover and Sensitive Operations (TGUSO), the NSUCOPG, and the FRIFIQ operational 
division PGs 


18 , 6 , 13,4 (U//FQUQ) Standards for Use and Approval Requirements for 

1 N VESTI CATI VE M ETH 0 1) 

18.6.13.4,1 (U) Standards for Use of is vestiga we Method 

{U//FOUG) An official considering approval or authorization of a proposed undercover 
application must weigh the risks and benefits of file operation, giving careful consideration to 
the following; 

A) ( U.TOUO) The risks of personal injury to individuals, property damage, financial loss to 
persons or business, damage u> reputation, or other harm to persons; 

B) (U//FOUO) The risk of civil liability or other loss to the government; 

Cj (U//FOUO) The risk of invasion of privacy or interference with privileged or confidential 
relationships and any potential const itutional concerns or other legal concerns; 

D) (U /FOUO) The risk ihai individuals engaged in undercover operation* may become involved 
in illegal conduct; and 

E) (U//FOUO) The suitability of government participation in the type of activity that is evpceted 
to occur during the operation. See AGG-UCO, Part IV .A. 

1 B. 6.13.4.2 (U//FOUO ) Approval Requirements for UCOs (investiga tions of viola tions 
OF FEDERA L CRIMINAL LAW THAT DO NOT CONCERN THREA TS TO NA TIONA L SECURITY 
OR FOREIGN INTELLIGENCE) 

(U//FGUO) The following approval and authorization requirements apply to undercover 
operations relating to activities in violation of federal criminal law that do not concern threats 
to the national security or foreign intelligence; 
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A) (U//FOUQ) An "undercover activity” in which an undercover employee plans to meet with a 
subject requires the approval of the 5SA. 

B) (U//FOUG) An "undercover operation" must he approved by the SAC* The CDC must review 
all undercover operations before approval and provide advice to the SAC regarding 
predication of subjects, entrapment issues, and whether the proposal meets the requirements of 
the AGG-UCO or other DOJ and FBI policy guidance. 

C) (U//FOUO) In addition to SAC approval, authorization from the responsible FBIHQ Assistant 
Director or Executive Assistant Director must bo obtained if the undercover operation 
involves a sensitive circumstance or certain fiscal circumstances, as those terms are defined in 
the AGG4JCQ or other FB I guidance. 

DJ (U//FOUO) U ndercov er operations thaL involve a sensitive circumstance (Group I undercover 
operations! require review by the CUORC as part of the authorization process. This 
requirement applies to both new and renewal proposals. 

E! (U//FDUQ) Undercover operations that do not involve a sensitive circumstance (Group II 
undercover operations) require notice to the appropriate FBIHQ operational unit and to the 
Undercover and Sensitive Operations Unit following SAC’ approval, A renewal that would 
extend the operation beyond one year requires authorization from the responsible Assistant 
Director. 

F) (Uf'TOUO) All Innocent Images National Initiative ( UNI) undercover operations deemed 
Group I and Group 11 operations require opening and renewal approvals from FBIHQ* Cyber 
Division. Group 1 UNI undercover operations will also be reviewed by the CUORC . 

G) (U//FOUO) Requirements for interim approval and emergency approval For undercover 
operations are contained in the FGUSO , 

1 8,6, 13 A. 3 ( Uf/FO ISO) Approva i. Requirements for UCOs (iuvestiga tions of viola tions 
THAT CONCERN THREATS TO NATIONAL SECURITY OR FOREIGN INTELLIGENCE) 

(U//FOUO) The following approval requirements apply to undercover operations that concent 
threats to the rational security or foreign intelligence; 

A) (U/.'TOUO) An “undercover operation” must be approved by the SAC, The CDC must review 
all undercover operations before approval and provide advice to the SAC regarding 
predication of subjects, entrapment issues, and whether the proposal meets the requirements of 
the NSUCOPG, or other DOJ and FBI policy guidance. 

B) (U //FOUO) In addition to SAC approval, authorization from the responsible FBIHQ Assistant 
Director or Executive Assistant Director must be obtained if the undercover operation 
involves a sensitive circumstance, as defined in NSUCOPG, 

C) (U//FOUO) Undercover operations that involve a sensitive circumstance must be reviewed 
and authorized hy the responsible Assistant Director (Group I operations). Review by rite 
UCRC must precede sueh authorization, If the matter invol ves religious or political 
organizations, the review must include participation by a representative of the DOJ NSD, See 
AGG-Dom, Section V: and NSUCOPG. 

D) (U//FGUO) Undercover operations that do not involve a sensitive circumstance (Group IE 
undercover operations} must be forwarded lo the appropriate operational unit at FBIHQ for 
review on a IJACB basis prior to initiation of the operation, A renewal ibat would extend the 
operation beyond 12 months requires authorization from the responsible Deputy Assistant 
Director or Assistant Director. 
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E) (U//FOUO) Requirements for interim approval and emergency approval for undercover 
operations contained in NSUCOPG . 

lfl 6.1 3.5 [U] Duration of Approval 

(U//FOUO) FBI undercover operations arc generally approved for a maximum period of six 

months with six month renewal periods authorized thereafter 

lft, 64 3,* [U] Additional Guidance 

A)(U//FOUO) The FGU 50 provides additional guidance for the use of die undercover method in 
all undercover operations relating to activities in violation of federal criminal law that do not 
concern threats to the national security or foreign i nielli gence- 

ES) OJ//FOUO) Undercover activities and operations that concern threats to the national security 
or foreign intelligence must he carried out in conformity with the NSUCOPG and the 
appropriate investigative program PG that is responsible for the Li CO. 

C) (U//FQUG) The FD-997 . Application lor Undercover An ihorily. must be used to obtain 
approvals for all undercover operations. Group I and Group II. Case agents should consult 
with the field office CDC and Undercover Coordinators in planning proposed UCOs. 

1 8,64 3,7 (U) Compliance and Monitoring, and Reporting Requirements 

[II// FOLIO) All UCOs must provide an annual in vestigati ve/compliance summary using the FU-WH 
to appropriate FBIHQ undercover program managers. 
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18.7 (U) Authorized Investigative Methods in Full Investigations 

(U) Sec AGG-Dom, Part V.A.I 1-13, 

(U) In Full Investigations, to include Enterprise Investigations* the authorized investigative 
methods include: 

A) (U> The investigative methods authorized for Assessments. 

1) (U) Public information, (Sec Section 1 K.ll ) 

2) (U) Records or information - FBI and DOJ. (See Seclion I 

3) (U) Records or information - Other federal, stale, local, itibal. or foreign government 
agency. {See Seclion 18-13 ) 

4) (U) On-line services and resources, (See Section 18. 5.4 ) 

5) (L^CHS use and recruitment. (See Section 18.11} 

6) (U) Interview or request information from the public or private entities, (See Section 

IMA) 

7) (U) Information voluntarily provided by governmental or private entities. (See Section 
IB.17 1 

SI (U) Physical Surveillance (not requiring a court order), (See Section 18,18} 

B) (U) The investigative methods authorized for Preliminary Investigations. 

1) (LI) Consensual monitoring of communications, including electronic communications. (See 
Section 18.6.1 1 

2) (U) Intercepting the communications of a computer trespasser. (See Section 18.6.2 ) 

3) (U) Gosed-dncuiL (elevisioit/video surveillance, direction tinden;. and other monitoring 
devices. (See Section 18.6.3 } 

4} (U) Administrative subpoenas. | See Section 18.6.4 } 

5) (U) Grand jury subpoenas. {See Section ULfiJi) 

6) (U) National Security Letters, (See Section 18.6,6} 

7} (U) FISA Order for business records, (See Section 18.6.7 ) 

8) (U) Stored wire and electronic communications and transactional records, (See Section 
18 M) ih 

9) (U) Pen registers and irajVtraee devices, (See Section 1 8,1?) 

10) (U) Mail covers. (See Section 1 8.6. 1 0} 

11) |L) Polygraph examinations. | See Section 1 ft. 6.1 1 ) 

3 2 ) (U ) Trash Covers (Searches that do not require a warrant or court order). (See Section 

is.e.m 

13) (U) Undercover operations, (See Section IMJi) 


a ," 'VfOUO) TheujfB of Search Warrants tor brain this information, in Preliminary trtvestJgatfons is 
prohibited, (See PJOG Section 18,6.B.4.2,3) 
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C) { U) Searches with a warrant or court order (reasonable expectation of privacy), (See Section 
1B-7..1 below) 

D) (L?) Electronic surveillance - Title III. (See Section UL7.2 below) 

E) (U) Electronic survei I lance - FISA and FISA Title VII (acquisition of foreign intelligence 
information). (See Section 18,7 .3 below) 

(U//FOUO) Not all investigative methods are authorised while collecting foreign intelligence as 
part of a Full Investigation. See D1GG Section for more information. 
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18,7.1 (UJ In vestiga n l i Method: Searches - With a Warra nt or Cour t 

Order (reasonable expectation of privacy) 

{ LI ) See AGG-Doin. Fart V.A.I2 and the Attorney General’s Guidelines On Methods Of 
Obtaining Documentary .Materials Held By Third Parties. Pursuant to Title 1L Privacy Protection 
Act of 1980 (Pub. L. 96-140. Sec. 201 ct seq : 42 L'.S.C. S 2000sui-l I, el scq). 

18.7.1.1 (U) Summary 

(U) The Fourth Amendment to the United Slates Constitution governs all searches and 
seizures by government agents. The Fourth Amendment contains two clauses. The first 
establishes the prohibition against unreasonable searches and seizures. The second provides 
that no warrant (authorizing a search or seizure) will be issued unless based on probable 
cause. Although an unlaw ful search may not preclude a prosecution, it ean have serious 
consequences for the government. These include adverse publicity, civil liability against the 
employee or the government and the suppression of evidence from the illegal seizure. 

(LtFOUG) inpfitutwn ; Physical search requiring a judicial order or warrant may be used iti 
a Full (national security and criminal) Investigation and lo collect Foreign intelligence 
information, This method may not be used for: (i) an Assessment or Preliminary 
Investigation: or (ii) providing assistance to other agencies, unless there is already an FBI 
FISA or warrant related to the request for assistance. Attorney General approval must be 
obtained prior to using any FISA-obtained or derived information in any proceeding whether 
foreign or domestic. When providing assistance to a Foreign agency, information must be 
provided pursuant to the FBI Foreign Dissemination Manual and the FBI's Standard 
Minimization Procedures or other applicable minimization procedures,' 1 

(U) A search is a government invasion of a person’s privacy. To qualify as reasonable 
expectation of privacy, the individual must have an actual subjective expectation of privacy 
and society must be prepared to recognize that expectation as objectively reasonable. See 
Katz v. United States . 389 U S. at .161. The ability to conduct a physical search in an area or 
situation where an individual has a reasonable expectation of privacy requires a warrant or 
order issued by a court of competent jurisdiction or an exception to the requirement For such a 
w arrant or order. The warrant or order must be based on probable cause. The United States 
Supreme Court defines probable cause to search as a "fair probability that contraband or 
evidence ofa crime w-ill be Found in a particular place," Illinois v. Gates . 462 U.S. 2 1 3. 238 
( 1983). A government agent may conduct a search without a warrant based on an individual's 
voluntary consent. A search based on exigent circumstances may also be conducted without a 
warrant, but the requirement for probable cause remains. 

18.7.1.2 (UJ L£GAl AUTiIoHiiy 

i, L’l Searches conducted by the F13E must be in conformity with F RCP Rule -I I : FISA, 50 
U.S.C. $5 1821-1829; or L O. 12333 $ 2.5. 


18-151 

UN CLASS [FI ED - FOR OFFICIAL USE ONLY 



UNC LASSIFIED FOR OFFICIAL USE ONLY 
$18 Domestic Investigat ions and Operations Guide 

18.7. 1.3 tU} Definition of Investigative Method 

(U l Phi'skitf Search defbmt : A physical search constitutes any physical intrusion within the 
United States into premises or property (including ex ami nation of the interior of property by 
i ethnical means) that is ini ended to result in the seizure, reproduction, inspection, or alteration 
of information, material, or property, under circumstances in which a person has a reasonable 
expectation of privacy. 

(L ) A physical search requiring a warrant does nut include: (i) electronic surveil lance as 
defined in FISA or Title ILL or (ii) the acquisition by the United States Government of foreign 
intelligence information from international foreign comm uni cations, or foreign intelligence 
activities conducted according to otherwise applicable federal law involving a foreign 
electronic communications system, using a means other than electronic surveillance as 
defined in FISA. 

18.7.L3A (U) Requirement for Reasqna bigness 

(U.) By the terms of the Fourth Amendment, a search must be reasonable at its inception and 
reasonable in its execution, Whether a search meets Fourth Amendment standards will depend 
on the ju still eation for the search and the scope of the search conducted, in all investigations, 
FBI employees must he prepared to articulate the basis lor the search and the manner in which 
it was conducted. 

1 fl, 7, 1 33 (V) REASONA BLE EXPECTA T!ON OF PttlVA LY 

(U) The right of privacy is a personal right, hoe a property concept. It safeguards whatever an 
individual reasonably expects to be private. The protection normally includes persons, 
residences, vehicles, other personal property, private conversations, private papers and 
records. The Supreme Court has determined dial there is no reasonable expectation of privacy 
in certain areas or information As a result, government intrusions into those areas do not 
constitute a search and, thus, do not have to meet the requirements of the Fourth Amendment 
These areas include: (i)open fields; (ii) prison cells: (iii) public access areas; andtiv) vehicle 
identification numbers, The Supreme Court has also determined Thai certain governmental 
practices do not involve an intrusion into a reasonable expedition of privacy and, therefore, 
do not amount to a search- These predicts include: (i) aerial surveillance conducted from 
navigable airspace; fail field test of suspected controlled substance: and (iii) tidor detection. A 
reasonable expectation of privacy may be terminated by an individual taking steps to 
voluntarily relinquish the expectation of privacy, such as abandoning property or setting trash 
at the edge of the curtilage or beyond tor collection, 

1 8. 7. 1.3.3 (U) IssuA nce of Sea rch Warrant 

(U) Under FRC’P Rule 41, upon the request of a federal law enforcement officer Of an attorney 
for the govern men i, a search w-arrant may he issued by: 

A) (U) a federal magistrate judge, or if nunc is reasonably available, ajudge of a slate court o I 
record within the federal district, for a search of property or for a person within the district: 
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BJ (LI) a federal magistrate judge fora search of property or lor a person either within or outside 
the district if the property or person is within the district when (he warrant is sought but might 
move outside the district before the warrant is executed; 

C) (U) n federal magistrate judge in any district in which activities related to the terrorism, may 
have occurred, for a search of properly or for a person within or outside the district, in an 
investigation of domestic terrorism or international terrorism (as defined in IS U,5„C. § 2331); 
and 

D) (LI) a magistrate with authority in the district to issue a warrant to install a tracking device. 

The warrant may authorize use of the device to track the movement of A person or property 
located within the district, outside, or both, 

(L l ) Physical searches related to a national security purpose may bo authorized by the FISC. 
(50U.S.C. §§ 182 1-1829) 

1 8. 7. 1.3. 4 (U) Proper rv uu Persons Tha tMav be Seized wt tm a Warrant 

(U) A warrant may be issued: to search for ami seize any; (i) property that constitutes evidence 
of the commission ofa criminal offense; (ii) contraband* the fruits of crime, or things 
otherw ise criminally possessed; or (iii) property designed or intended For use or that is or has 
been used as (lie means of committing a criminal offense. In addition to a conventional search 
conducted following issuance ofa warrant, examples of search Warrants include; 

18,7*1 ,J + 4, 1 <U) ANTI Cl ? ator v Warra NTS 

(U) As the name suggests, an anticipatory warrant differs from other search warrants in 
[bat it is not supported by probable cause to believe that contraband exists at the premises 
to be searched at the lime the warninl is issued. Instead, an anticipatory starch warrant is 
validly issued where there is probable cause to believe that a crime has been or is being 
committed, and that evidence oi'sueh crime will be found at the described location al the 
time of the search, but only after certain specified events transpire. These conditions 
precedent to the execution of an anticipatory warrant, sometimes referred to as 
"triggering events," are integral to its validity. Because probable cause for an anticipatory 
warrant is contingent on the occurrence of certain expected or "triggering" events, 
typically the future delivery, sale, or purchase of contraband, the judge making the 
probable cause determination must take into account the likelihood that the triggering 
event will occur on schedule and as predicted. Should these triggering events fail to 
materialize, the anticipatory warrant is void. 

18.7.1 .3*4.2 | U) Snt ak a n n Pkek Sr a hc h Warrants 

(U) A sneak and peek search warranl allows law enforcement agents to surreptitiously 
enter a location such as a building, an apartment, garage, storage shed, etc., for the 
purpose of looking for and documenting evidence of criminal activity. The purpose of 
this type of warrant is to search for and seize property (eiiher tangible or intangible) 
without immediately providing notice of the search and a return on the warrant to the 
owner of the property searched or seized. See FRCP 43(f)(3), A sneak and peek warrant 
is used to gather additional evidence of criminal activity without prematurely exposing an 
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on-going investigation The evidence discovered during a sneak and peek search may be 
used to support a request lor a conventional scareh warrant. 

1 8. 7.1. 3.4. J < Li) Mail Openings 

(U) Mail in United Stales postal channel? may he searched only pursuant to court order, 
or presidential authorization. United States Postal Service regulations governing such 
activities must be followed. A search of items that are being handled by individual 
couriers, or commercial courier companies, under cineum stances in which there is a 
reasonable expectation of privacy, or have been sealed for deposit into postal channels, 
and that arc discovered within properties or premises being searched, must be carried out 
according to unconsenicd EISA or FRCP Rule 41 physical search procedures. 

IK.7.1. 3.4.4 (U) Compelled Discloslkj: ok nil Contents or Stored Wire or 

El ectron k Com munic at ion s 

(U) Contents in “‘electronic storage"’ (e.g., unopened e- mail/ voice mail) require a search 
warrant. See 1 K U.S.C. $ 2703(a). A distinction is made between the contents of 
communications that are in electronic storage (e.g., unopened e-mail) for less titan ISO 
days and those in ''electronic storage" for longer than 1 SO days, or (hose that are no 
longer in ''electronic storage" (e.g., opened e-mail). In enacting the ECP A, Congress 
concluded that customer may not retain a "reasonable expectation of privacy” in 
information sent to network providers. However, the contents of an e-mail message that 
is unopened should nonetheless be protected by Fourth Amendment standards, similar to 
the contents of a regularly mailed letter. On the other hand, if the contents of an unopened 
message are kept beyond six months or stored on behalf of the customer alter the e-mail 
has been received or opened, it should be treated the same as a business record in the 
hands of a third party, such as an accountant or attorney. In that ease, the government 
may subpoena the records from the third party without running afoul of cither the Fourth 
or Fifth Amendment, [fa search warrant is used, it may be served on the provider without 
notice to the customer or subscriber, 

7. UJ.4. 1 a ') SkAftru Warra ST 

(UvFOUQ) Investigators can obtain the full contents of a network account with a search 
warrant. ECPA does not require the government to notify the customer or subscriber 
when it obtains information from a provider using a search warrant. Warrants issued 
under IK U.S.C § 2703 must either comply with FRCP Rule 4 1 or be an equivalent stale 
warrant. Warrants issued pursuant to IS U.S.C. $ 2703 do not require personal service on 
the customer; the warrants are only be served on the electronic communication service oi 
a remote computing service. FRCP Rule 41 requires a copy of the warrant be left with the 
provider, and a return and inventory be made, Federal courts have nationwide jurisdiction 
to issue these search warrants [see below). 

(U) With a search warrant issued based on probable cause pursuant to FRCP Rule 41 or 
an equivalent state warrant, the government may obtain: 


IS- 1 54 

UNCLASSIFIED- FOR OFFICIAL USE ONLY 



UNCLASSIFIED FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide §18 

AMU ) The content* of a wire or electronic communication that has been in electronic storage in 
an electronic communications system for one hundred and eighty days or less, and 

B MU) Everything that can be obtained using a 1 8 U.S.C. § 2703(d) court order with notice. 

(U) In other words, every record and all of the stored contents of an account — including 
opened and unopened e-mail/ voice mail — can be obtained with a. search warrant based 
on probable cause pursuant to FRCP Rule 4 L Moreover, because the warrant is issued by 
a neutral magistrate based on a finding of probable cause, obtaining a search warrant 
effectively insulates the process from challenge under the Fourth Amendment. 

/ 8. 7. 1.3. 4.4. 1 (V) Na ttos H it>L Sl ope 

(U) Search warrants under E8 U.S.C, £ 2703(a) may be issued by a federal "court with 
jurisdiction over the offense under investigation," and may be executed outside the 
district of the issuing court for material responsive to the warrant. State courts may also 
issue warrants under 18 U.S.C. § 2703(a), but the statute does not give these warrants 
effect outside the issuing court's territori til jurisdiction. As with any other FRCP Rule 41 
warrant, investigators must draft an affidavit and a proposed warrant that complies with 
FRCP Rule 41. 

/ 8. 7 : 1. 1 4,4.3 ( £,■) Si n i ice of Process 

(U) 18 U.S.C. § 2703(a) search warrants are obtained just like any other FRCP Rule 4 1 
search warrant but are typically served on the provider and compel the provider to find 
and produce the information desen bed in the warrant. EC PA expressly states that the 
presence of an officer is not required lor service or execution of a search warrant issued 
pursuant to 18 U.S.C. 4 2703(a). 

IS. 7 L 3. 4.4. 4 (V) Col ft r Order n t m Prior Notice to the St esc to her or 

Customer 

(U//FGUO) Investigators can obtain everything in a network account except for 
unopened e-mail or voice-mail stored with a provider for 180 days or less using a IS 
U.S.C, £ 2703(d) court order with prior notice to the subscriber unless they have obtained 
authority for delayed notice pursuant to 18 U.S.C. £ 2705. LCPA distinguishes between 
the contents of communications that are in "electronic storage" (e,g., unopened e-mail ) 
for less than 180 days, and those that have been in ''electronic storage’ 1 for longer or that 
are no longer in "electronic storage" (e.g., opened e-mail). 

(U) FBI employees who obtain a court order under IS U-S.C § 2703(d). and either give 
prior notice to the subscriber or comply with the delayed notice provisions of 18 U.S.C, § 
2705(a), may obtain: 

A)(U) “The contents of a wire or electronic communication that has been in electronic storage in 
an electronic communications system for more than one hundred and eighty davs." IS U.S.C. 

£ 2703(a). 
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B) (U) "The contents of any wire or electronic communication" lie Id by a provider of remote 

computing service "'or behalf of. . . a subscriber or customer ol' such remote computing 
service," 18 U.S.C S§ 2703(bHl 2 W (bM2): and 

C) (U) Everything that can be obtained usings lb U.S.C. i; 2703(d) court order without notice. 

(U) Asa practical matter, this means that the government can obtain all associated 
subscriber and transactional records and the full contents of a subscribers account except 
unopened e-mail and voicemail (that has been in ’'electronic storage" I SO days or less) 
using a IS U.S.C. § 2703(d) order that complies with the prior notice provisions of 18 
U5.CS 2703(b)(1)(B), 

( U I ff notice would jeopardize the i n vest i gut ion, FBI employees can obtain an order 
delaying notice for up to ninety days. See 18 U.S.C. sj 2705(a). A request to delay notice 
may be included in the 1 8 U.S.C, $ 2703(d) application and proposed order. FBI 
employees may also apply to the cotin for extensions of the delay. See 18 U.S.C. ££ 
2705(a)( 1 1(A) and 2705(a)(4). Upon expiration of the delayed notice period, the 
government is required to send a copy of the request or process along with a letter 
explaining the delayed notice to the customer or subscriber. See IS U.S.C. § 2705(a)(5). 


IS. 7. 1.3. 4. 4 . 5 fUj Legal S tax da rd 


(L 1 ) To order delayed notice, the court must find that "there is reason to believe that 
notification oflhe existence of the court order may... endanger the life or physical safety 
of an individual: [lead to] flight from prosecution; [lead to] destruction Of or tampering 
with evidence: [lead to] intimidation of potential witnesses: or . . . otherwise seriously 
jeopardizfe] an investigation or unduly delay] ] a trial.' 1 18 U.S.C. §§ 2705(aj( I HA) and 
2705(a)(2). Hie applicant must satisfy this standard anew each time an extension of the 
delayed notice is sought. 

/ s, 7. Li. 4 4 . 6 ( Vj ft ' a now fPf Scope 

(U) Federal court orders under 18 U.S.C. $ 2703(d) have effect outside the district of the 
issuing court. Orders issued pursuant to 1 8 U.S.C. § 2703( d) may compel providers to 
disclose information even if the information is stored outside the district of the issuing 
court. See IK U.S.C. $ 2703(d) ("any court that is a court of competent jurisdiction" may- 
issue a IS U.S.C. $ 2703[dJ order): 18 U.S.C. 271 1(3) (court of competent jurisdiction 
includes any federal court having jurisdiction over the oiTense being investigated without 
geograph ic I i m iiali on ) . 

(U) 18 U.S.C . § 2703(d) orders, may also be issued by state courts. See 18 U.S.C. 

271 1(3). 3 127(2 )(B). Such orders issued by state courts, however, do rot have efTecl 
outside the jurisdiction of The issuing state. See 18 U.S.C. §§27] 1(3). 

IS. 7. 1.3. 4. 4 . 7 (U) Cm r r Order n r rmn r Prior \o th e to the Svb.sc rirer or 

Customer 

(U) A court order under 1 8 U.S-C. £ 2703(d) may compel disclosure of: 
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A) (U) All " records} or other information pertaining to a subscriber to or customer of such 
service (net inducting the contents of communications (held by providers of electronic 
communications service and remote computing service}),"' and 

B) j U) Basic subscriber information that can he obtained using a subpoena without notice, I £ 
U.S.C, § 2703(g)(1). 

18.7.1.4 (U) Approval Requirements for Investigative Method 

A) (U//FOUO) Search uwrnutis issued under auifHtritv of FRCP Rah* 41 : A warrant to search 
is issued by a federal magistrate (or a stale court judge if a federal magistrate is not reasonably 
available). Coordination, with the US AO or DQJ is required to obtain the warrant. 

B) rUflFQUTO FISA : In national security investigations, field office requests for FISA 
authorized physical searches must be submitted to FBI HQ using the FBI FISA Request Form . 
Field office requests for FISA approval are tracked through FISA MS. This form should be 
completed by the case agent 

C) ( IJA''FOU ( "> I -Stffxffivt hit t'Mfvaiir? Waiter* {SIM J : Notice to the appropriate FBIHQ 
operational Unit Chief and Section Chief is required if the matter under investigation k a 
sensitive investigative matter. Notice to DOJ is also required, as described in DIOG Section 

ID. 


18.7.1.5 [U] Duration of Approval 

(U) The duration for the execution of a warrant is established by the court order or warrant. 

18.7.1.6 (U) Specific Procedures 

18,7,1.6,1 (Uj Obta inwg a Wa brant under FRCP Rule 41 

18.7.1. 6.1.1 (U) Probable Cause 

(U//FOUQ) After receiving an affidavit or other information, a magistrate judge or a 
judge of a state court of record must issue the warrant if there is probable cause to search 
for and seize a person or property under FRCP Rule 41(c), Probable cause exists where 
"the facts and circumstances within the FBI employee s knowledge, and of which they 
had reasonably trustworthy information are sufficient in themselves to warrant a person 
of reasonable caution in the belief that,..* 1 a crime has been or is being committed, and 
that sizable property can be found at the place or on the person to be searched. Probable 
cause is a reasonable belief grounded on facts. In judging whether a reasonable belief 
exists, the test is whether such a belief would be engendered in a prudent person with the 
officer’s training and experience. To establish probable cause, the affiant must 
demonstrate a basis for knowledge and belief that the facts are true and that there is 
probable cause to believe the items listed in the affidavit will be found at the place to be 
searched, 

IH.7.1 .ft J ,1 (U) Requesting a Warrant t^ the Present: of a Judge 

A) (U) H arrant utt an Affidavit ; When a federal law enforcement officer or an attorney for the 
government presents an affidavit in support of a warrant, the judge may require the affiant to 
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appear personally and may examine under oath the affiant and any witness the affiant 
produces. 

B) ft) H'arm/u tm Suam Tevtimtutv ; The judge may wholly or partially dis|iense with a written 
affidavit and base a warrantor sworn testimony if doing so is reasonable under the 

ei re uituU suites. 

C) (U) Recording Testimony : Testimony lakcn in support of a warrant must be recorded by a 
court reporter or by a suitable recording device, and (tie judge must file the transcript or 
recording with the clerk, along with any affidavit. 

18*7.1*6.1.3 (U) Requesting a Wahham by Telephonic or Other Means 

A H l ; ) fn (n'itsruf : A magistrate judge may issue a W’-arrant based on information communicated 
by telephone or other appropriate means, including facsimile iransmrssfon, 

B) fl.il RetnrdUiu Tr.siiiiwny i Upon learn mg that an applicant is requesting a warrant, a 
magistrate judge must: (i) place under oath the applicant and any person on whose testimony 
the application is based: and lit} make a verbatim record of the conversation with a suitable 
recording device, if available, or hy a court reporter, or in writing. 

C ) (U) Certifying Te\timvm : The magistrate judge must have arty recording Or court reporter's 
notes transcribed., certify the transcription's accuracy, and file a copy of the record and the 
transcription with the clerk. Any written verbatim record must be signed by the magistrate 
judge and filed with (he clerk. 

D) ( [..If Stfpprt'\*iyff 1. imjtpd : Absent a finding of had faith, evidence obtained from a warrant 
issued under FRCE 3 Rule 41(d)(3)(A) is not subject to suppression on the ground (hat issuing 
the warrant, in that manner was unreasonable under the circumstances. 

18,7.1.6*1.4 (U) Issuing the Warrant 

(U) In general, the magistrate judge ora judge of a state court of record must issue the 
warrant to an officer authorized lu execute it. The warrant must identify the person or 
property to be searched, identify any person or property to be seized, and designate the 
magistrate judge to whom it must be returned. The warrant must command the officer to: 
(i) execute the warrant within a specified time no longer than 10 days' (iij execute the 
warrant during the daytime, unless the judge for good cause expressly authorizes 
execution al another Lime' and (iiij return I he warrant to the magistrate judge designated 
in the warrant. 

18.7.1.6.1.5 (1_‘) Warrant b\ Telephonic or Other Means 

(U) If a magistrate judge decides to proceed under FRCP Rule 41(d)(3)(A)* the following 
additional procedures apply: 

A) (l. i Pw&uripj* a Duplicate Original Warrant : The applicant must prepare 

"proposed duplicate original warrant" and musi read or otherwise transmit the contents ofthr 
dociimenl verbatim to the magistrate judge. 

B) (U) Preparing an Original tt nrnwf The magistrate judge must enier the contents of the 
proposed duplicate original warrant into an original warrant. 
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Q(U) \h>dificafiatts : The magistrate judge may direct l he applicant to modify the proposed 
duplicate original warrant. In that case, the judge must also modify the original warrant. 

L))t l.i ) Signing the Original H'jammif and the l) untied ie Oriniuat it arrant : Upon determining to 
issue the warrant, Lhe magistrate judge must immediately sign I he original warrant, crier on ils 
face the exact time Ie b issued. and direct die applicant to sign the judge’s name on the 
duplicate original warrant. 

1 8,7.1 .ft. 1.6 (U) Executing and Returning the Warrant 

A) (U) Y tiring the Time : The officer executing the warrant must enter on its face the exact date 
and time it is executed 

B) t \J\ hui'ttfory : An officer present during the execution of the warrant must prepare and verify 
an inventory of any property seized. The officer must do so i n the presence of another officer 
and the person from whom, or from whose premises, the property was taken. IF either one is 
not present, the officer must prepare and verify the inventory in the presence of at least one 
other credible person. 

C) fUl kt'cciM : The officer executing the warrant must: (i) give a copy of the warrant and a 
receipt lor the property taken to the pereon from whom, or from whose premises, the property 
was taken' or (iij leave a copy of the warrant and receipt at the place where the officer took the 
property. 

DHL'} Return ; The officer executing the warrant must promptly return il together with a copy 
of the inventory — k> the magi si rate judge designated on the warrant. The judge must, on 
request, give a copy of the inventory lo the person from whom, or from whose premises, the 
property was taken and to the applicant for the warrant, 

1 8.7, | ,g,1 + 7 (U) Forwarding Papers to the Clerk 

< U S The magistrate judge to whom the warrant is returned must attach to the warrant a 

copy of the return, the inventory* and all other related papers. and must deliver them to the 

clerk in the district where the property was seized, (FRCP Rule 41 ) 

IH.7.1.6.LB (U} Warrant tor a Tracking Device 

\ \ ( U \ SoHns the Tima : The officer executing a tracking device warrant must enter on it the 
exact dale and lime the device was installed and the period during which it was used. 

Hi [ LJ | Rafarn : Within It) calendar days, after the use of the tracking device has ended, the officer 
executing the warrant must return it lo the judge designated in the warrant. 

C "Ul Svrvic^: Within 1 0 calendar days alter use of the tracking device has ended, the officer 
executing the warrant must serve a copy of the warrant on the person who was tracked. 

Service may be accomplished by delivering a copy lo (he person who. or whose property was 
Tracked: or hy leaving a copy at the person's residence or usual place of abode with an 
individual of suitable age and discretion who resides al that local ion and by mailing a copy Lo 
i he person's last known address. Upon request of the government, the judge may delay notice 
us provided in FRCP Rule 41(f)(3). 
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1 8.7, 1 .6. L9 (U) Delayed NOTICE 

(U) Upon Ihe government's request, a magistrate judge— or if authorised by FRCP Rule 
41(b), a judge ofa stale court of record — may delay any notice required by FRCP Rule 
43 if the delay is authorized by statute. 

18.7.1.6.2 (U) OBTAiMHGA FiSA Warrant 

(U) Applications For court-authorized physical search pursuant to FISA must be made by a 
federal officer in writing upon oath or affirmation and with the specific approval of the 
Attorney General. (Sec 50 LbS.C. fj 1823). 

18.7.1.6.2.1 ( U) Certificate by The Direc tor of the FBI 

(U) Each FISA application must be accompanied by a Certification by the Director of the 
FBI or one of nine other individuals authorized by Congress or the President to provide 
such certifications that: the information being sought is foreign intelligence information; 
that a significant purpose of the search is to obtain foreign intelligence information; that 
such information cannot reasonably he obtained by normal invest i gat Eve techniques; that 
the information sought is "foreign intelligence information" as defined by FISA. The 
certification must include a statement explaining the certifier s basis for the certification. 

(U) 50 U.S.C. j$ [823 specifies the Assistant to the President for National Security 
Affairs; EG. 12139 as amended by E.G. 13383 specifics the Director of the FBI, Deputy 
Director ofthe FBI, the Director of National Intelligence, the Principal Deputy Director 
of National Intelligence, the Director of the Central Intelligence Agency, the Secretary of 
State, the Deputy Secretary of State, the Secretary of Defense, and the Deputy Secretary 
of Defense as appropriate officials to make certifications required by FISA. The FBI 
Director has represented to Congress that the FBI deputy Director will only certify 
EISA's when the FBI Director is not available to do so. 

13.7.1.6.2.2 (L ) Length of Period of Authorization i or FISC Orders 

fU) Generally, a FISC Order approving an unconsented physical search will specify the 
period of time during which physical searches are approved and provide lhat the 
government will be permitted the period of time necessary to achieve the purpose, or for 
90 days, whichever is less, except that authority may be: 

A) (II) For no more than one year for "Foreign Power" targets (eslablishmenls); or 

El J (U) For no more than 1 20 days for a non-USPER agent ofa foreign power, with renewals for 
up to one. 

13.7.1.6.2.3 (U) Extension of Physical Search authority 

(l l./FOUO) An extension of physical search authority may he granted on the same hawis 
as the original order upon a separate application for an extension and upon new findings 
made in the same manner as the original order. 
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1 8.7J .6.2.4 (U> Emergency FISA authority 

A) (U) The Attorney General may authorise an emergency physical search under FISA when he 
reasonably makes a determination that an emergency situation exisis that precludes advance 
FISA court review and approval* and ihere exists a factual predication for the issuance of a 
FISA Court Order. In such instances., a FISC judge musl be informed by the Attorney General 
or his designee at the time of the authorisation and an application according to FISA 
requirements is submitted to the judge as soon as is practicable but not more than seven (7) 
days after ihe emergency authority has been approved hy the Attorney General. 

BJ (U) If a court order is denied after an emergency authorization has been initialed, no 
information gathered as a result of the search may be used in any manner except if with the 
approval of the Attorney General, Lite information indicates a threat of death or serious bodily 
harm to any person. 

C) (U//FOUO) For an emergency FISA for physical search. DOJ Ol can be reached during 
regular business hours at (202) SI 4-5600 or through secure or through the DOJ Command 
Center at (202) 5 14-5000 at any time, 

I R.7j.6*2,5 (U) Special Circumstances 

(U) The President through the Attorney Genera! may also authorize a physical search 
under FISA without a court order for periods of up to erne year, if Ihe Attorney General 
certifies Lhal the search will he solely directed ai premises, information, material, or 
property that is used exclusively by or under the open and exclusive control of a foreign 
power; there is no substantial likelihood that the physical search will involve the 
premises, information, material, or property of a United Stales person; and there are 
minimization procedures that have been reported to the court and Congress, The FBI's 
involvement in such approvals ss usually in furtherance of activities pursued according to 
F.O, 12333. Copies of such certifications are to be transmitted to the FISA Court. See 50 
LLS.C. § I822[a]. 

(U) In format ion concerning USPHRs acquired through uncon seoted physical searches 
may only be used according to minimization procedures. See: 50 U-S.C. §§ 1 824(d)(4) 
and 1825(a). 

1 8.7, 1 .6. 2,6 (L) R EQL ! red N OTttt 

(U) If an authorized search involves the premises of an USPLR, and the Attorney General 
determines that there is no national security interest in continuing the secrecy of tlie 
search, the Attorney General must provide notice to the US PER that the premises was 
searched and the identification of any property seized, altered, or reproduced during the 
search. 


J B.7. 1 .6.2,7 (Llj'/FOl O) FISA VERIFICATION OF ACCURACY PROCEDURES 

(U//FOUO) The accuracy of in format ion contained within FISA applications is of utmost 
importance and must be reviewed in accordance with the FISA Accuracy Policy 
Implementation Guide. 
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(LV/FQUO) Only documented and verified information may be used to support FBI 
applications to the court. In addition to the certifications required through F1SAMS, the 
following administrative procedures must be followed for every FISA application: 

A) (U//FOUO) Each investigative file for which an application ss. prepared for submission to the 
FISC must include a FISA Accuracy sub-file, This sub-file must be used for copies of all of 
the supporting documentation relied upon when making the certifications contained on the 
FISA Verification Form ("Woods Form”), which is available in the Forms section of the 

NS LB library at 

httpy.-’homc. tbinel . tbi DQ/QGC/ M a in'^OLaw* p2riLi brarvT orms/N S L B%2t IL ihra ry .asp s,. A 
FISA accuracy subfile must include; 

if (U//FOLTO) FBI database checks that were conducted to determine whether the target of 
the proposed FISA is also the subject of an FBI criminal investigation, pastor present: 

2) (U//FOUO) CHS file checks (DELTA. 134, 137. 270, and 307 files) that were conducted to 
determine whether the target has. or has had, a relationship with the FBI as a CHS: and 

3 1 (U/7FOUO) Copies of the most authoritative documents that exist for each fact 
assorted in the application. The most authoritative document may be a cable,, EC, 
letterhead memorandum (LHMK FISA intercept ("tech cut 1 '), etc, The agent must use some 
judgment in ascertaining appropriate documentation, but, in general, the agent should 
attempt to gel as close as possible to original documentation of a fact. For example, if the 
target's immigration status is summarized in an EC’, the agent should strive to obtain a 
copy of the underlying immigration document to verify the fuct{s) asserted rather than 
relying on she EC, Similarly, if the application states that a National Security Letter (NSL) 
wbs served on a certain dale, there should be a copy of the NSL in the subfile instead of the 
EC that states an NSL was served. For more guidance on this issue, see FISA Accuracy PG 
at: http;//homc/rorms/fd 1 02 S/Pol icy%20and%2flGiridaricc JJ o2t) Library- ■03 t )4PG, pd r 

B) (U//FOUO) Every FISA application is subject uj review through two oversight mechanist™ 
designed to ensure that FBI field offices take appropriate steps regarding the factual aceuraev 
of statements to the FISC., First, CDCs in the field arc required to conduct accuracy reviews of 
limited numbers of FISAs in accordance with procedures established hy the General Counse 
Second. 01 attorneys conduct accuracy reviews with CDC and S'SLB participation on 
approximately an annual basis. A full description of each of these reviews can be found in the 
FISA Accuracy PG at: 

http://homc/fbrms/ ftl 1 028/ Pol iev%20and%2UGuidancc%2U Li brar vflJ394 PC i.pd i 

1 8.7. 1.6.2. 8 (U) Use of FISA Derived Information in Otkfr Proceedings 

( U'/FOUO) There are statutory (50 U.5.C. Sections 1806. 1825, and 1X45) and Atlome ■ 
General (AG) policy restrictions on the use of information derived from □ FISA ELSUR. 
phy steal search, or PR/TT. These restrictions apply to and must be followed by anyone 
“who may seek to use or disclose FISA information in any trial, hearing, or other 
proceeding in or before any court, department, officer, agency, regulatory body, or othc ■ 
authority of the United States. . . See DIOG Appendix E for the AG Memo. Revised 
Policy on (he Use or Disclosure of FISA Information, dated 01-1 0-2008. The guidance - 
the AG's Memo establishes notification/approval procedures which must be strictly 
followed. Though not contained in the AG Memo. FBI policy requires that use authorit 
be obtained for foreign proceedings as well. Questions concerning the FISA use polL; 
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requests for assistance in obtaining FISA use authority Irom the AG should be directed to 
NSLB's Classified Litigation Support Unit. 

(U//FOUO) The United Slates must, prior to the trial, hearing, or other proceeding or at a 
reasonable time prior to an effort to disclose or use that information or submit it into 
evidence, notify the “aggrieved person'" [as defined in 50 U.S.C. Sections I SO 100? 
1821(2), or 1841(2)],. and the court or other authority in which the information is to be 
disclosed or used, that the United States intends to disclose or use such information. See 
50 U.S C. Sections 1806(c), 1825(d), and 1845(c), 

18.7.1.6.2.9 (U//FOUO) FISA Physical Search administrative Sub- file 

(U//FOUO) Each investigative file for which an application is or has been prepared for 
submission to the FISC will include a sub- file to be labeled FISA Physical Search 
Administration Sub-Fite, This sub- file is to contain copies of all appl ications to and 
orders issued by the FISC for the conduct of physical searches in the investigation. The 
following data must be included in this FISA Physical Search Administrative Sub-file: 

A) ( UZ/FGUG} The identities of the persons or entities that are the subject of the physical search; 
and 

B| (U//FOUG) The description of the premises or property that is the subject of the physical 
search. 


I H.7 ,1 .6.2. 1 0 {U//FOIIOI FISA RENEWALS 

(UJ/FOUO) A FISA Review- Board has been established that is responsible for reviewing, 
on a monthly basis, those FISAs (other than certain FISAs from the Counterintelligence 
Division), that have been maintained for more than one year. The FISA Review Board 
meeting schedule and required justifications for requests for continued renewal arc 
contained and processed through FJSAMS . 

(U//FQUQ) The Board assesses the quality and quantity of foreign intelligence that has 
been generated by the FISA; the continued need for the foreign intelligence that is being 
generated by the coverage; the strategy and Liming of any criminal prosecution that might 
be contemplated against the target; any backlog in translation of the results of the 
surveillance; and the relative risk to national security if the FISA is not renewed. 

(U//FOUO) The Board will provide an explanation of the reason for denying permission 
to renew a FISA. If there is a dissenting opinion, the request to renew and the Boards 
position will be forwarded to the EAD NSB for an expeditious review. The Review 
Board's decision on renewals with dissenting opinions will be final, unless overruled by 
the EAD NSB. 


I& 7, L 6, 2 , M / (V) A PPEA LJHG THE DECfSrOtV OF THE ft Ft fFM Bo 4RD 

(U//FOUO) Should the field office responsible for a FISA disagree with the decision of 
the Board, the field office may present his or her position, by EC, to the Assistant 
Director (AD) responsible for the FISA, The AD will consider the merits of any 
additional information not previously submitted in writing to the Board and may choose 
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to present a written appeal {EC) for further consideration to the LAD NSB. An LC 
documenting the decision of the LAD must be provided to the Held office promptly upon 
the LAD’S NSB ftnal decision. 

18.7X6.2J i {Li i Compliance and Monitoring lok EISA 

(U//FOUO) All compliance issues related to FISA physical search must be reported to the 
Unit Chief of OOC National Security Law Policy and Training Unit, or successor 
position {soon to be renamed the OGC National Security Law Compliance, Oversight, 
and Training Unit), 

1S.7J.6J J2 (U> FISA Overcollection 

(U//FGUO) lit accordance with Foreign Intelligence Surveillance Court (FISC) Rule of 
Procedure 15, information acquired outside of the scope of the FISA authorization 
("FISA overcollection - ') will no longer be sequestered w ith the F ESC. absent 
extraordinary circumstances. Contact NSLB for further guidance regarding the handling 
of any FISA overcollection. 
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1 8. 7.2 (U) In vestiga TtVE Method: Electronic Sun veil lance - Tin E III 

18.7.2.1 (U} Summary 

(U//FOUO) Electronic Surveillance f ELS UR) under Title HI is a valuable investigative 
method. It is* also, a very intrusive means of acquiring information relevant to the effective 
execution of the FBI's law enforcement. To ensure that due consideration is given to the 
competing interests between law enforcement and the effect on privacy and civil liberties, this 
section contains various administrative and management controls beyond those imposed by 
statute and DOJ guidelines. Unless otherwise noted, it is the responsibility of the case agent 
and his/her supervisor to ensure compliance wiih these instructions. Title HI ELS UR is only 
authorized as an investigative method in the conduct of Full Investigations. Title III ELSUR 
requires: (il administrative or judicial authorization prior to its use; (ii) contact with the field 
office ELSLR Technician to coordinate all necessary recordkeeping; and (in) consultation 
with the Technical Advisor (TA) or a designated TTA to determine feasibility, applicability, 
and use of the appropriate equipment. 

{ U. FOliO) Application : Title III ELSUR may be used in a Full (criminal! Investigation. This 
method may not be used for; (i) an Assessment or Preliminary Investigation; or (ii) providing 
assistance to other agencies, unless there is already an FBI Title 111 related to the request for 
assistance. When providing assistance to a foreign agency, information must be provided 
pursuant to the FBI's Foreign Dissemination Manual. 

1 ft, 7.2 ,2 [UJ Legal Authority 

(U) Title III ELS UR is authorised by chapter 1 19, 18 U.S.C. $$25 10-2522 (Title III of the 
Omnibus and Safe Streets Act of I9GK). 

18.7,23 [U> Definition of Investigative Mfthod 

(U) Title 111 ELSUR is the rim-consensual electronic collection of information (usually 
communications) under circumstances in which the parlies have a reasonable expectation of 
privacy and court ordeira, or warrants are required. 

18.7,2.4 ( U) Title U1 Generally 

(U) With the prior approval of the Attorney General* or Attorney General's designee, the 
United Stales Attorney, by and through an AUSA* or the Strike Force Attorney, may apply to 
a federal judge for a court order authorizing the interception of wire, oral* or electronic 
communications relating to one or more of the offenses listed in Title Ell (IS U.S.C, $ 2516). 
Judicial oversight continues throughout tire operational phase of the electronic surveillance 
including the installation, monitoring, and handling of recording media. 

(U) For purposes of obtaining review' and approval for use oflhe method, Title ill 
applications arc considered to be either "sensitive” or'Tmn-sensilive.” The requirements for 
each are set forth below . 
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18.7.2.5 [U] Standards for Use and Approval Requirements for Non -Sensitive 
Tftle Ills 

(U//FOUO) An SAC is the authorizing official to approve all requests for "non-sensitive" 
Title III orders, including original, extension, and renewal applications. SAC approval of all 
extensions and renewals is required to ensure that field office managers will allocate the 
resources necessary to use this method. Any delegation of SAC approval authority lo an 
A SAC under this section must be in writing. 

(U//FOUO) Prior to SAC approval referred to above, CDC or GGC review is required for the 
initial "non-sensitive" Title III order. Extensions and renewals sought within 30 days after the 
expiration of the original Title 111 order in non-sensitive Title Ills do not require CDC' review, 
unless requested by the SAC or designee. The CDC must review renewals sought more lhan 
30 days after the expiration of the original Title 111 order. 

(U//FOUO) There may be situations or unusual circumstances requiring the FBI to adopt an 
already existing Title Til from another federal taw enforcement agency, Such adoptions may 
only be done on a ease-by-casc basis, in exceptional circumstances, and subject to the 
requirements set forth herein relating to CDC" review and SAC approval. Should the Title 111 
proposed for adoption involve sensitive circumstances* it must also be handled in accordance 
with the approval and review requirements set forth below. 

18.7.2 .6 fU] Stan dards fg r Use an d Af pro v al Req uirem ents fu r Sen siti ve Title l Us 

(U//FOUO) All Title III applications involving one of the seven "sensitive circumstances." 
listed below, including all extensions and renew als* must be reviewed by OGC and approved 
by FBEIfQ. The SAC* w ith the recommendation of the CDC must determine whether the 
request involves sensitive circumstances. The term “sensitive circumstances" as used in this 
section relating to electronic surveillance under Title III is different from the term "sensitive 
investigative matters*" as used in conjunction with approval requirements for opening 
Assessments and Predicated Investigations, and is different from the term "sensitive 
monitoring circumstances” as used in conjunction with the approval requirements for 
consensual monitoring. 

(UZ/FOUG) The lie Id office must include a copy of the completed CDC checklist (FD-926) 
w hen forw arding the initial sensitive Title III applications to OGC and FBI HQ for review. 
After the Initial submission, the CDC checklist must he completed by the appropriate CGC 
unit for all subsequent extensions or renewals of sensitive Title Ills, 

{U//FGUG) Although ultimate approval for sensitive Title Ills is at the FBI HQ level* the SAC 
or A SAC must continue to review and approve the use of the method tor all sensitive Title III 
applications as it relates to the allocation of resources within their field office. 

{U'YKOUO) The following five sensitive circumstances require the approval of a Deputy 
Assistanl Director {DAD} or a higher level official from the Criminal Investigative Division 
|CID). Cyber Division* Counterterrorism Division (CTD)* Weapons of Mass Destruction 
Directorate (WMDD), or Counterintelligence Division (CD), as appropriate: 
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A) (U//FOUO| Significant privilege issues or First Amendment concerns (c.g., attorney-client 
privilege or other privileged conversations or interception of news media representativei*): 

B) (U'.TOUO) Significant privacy concerns arc anticipated (c.g., placing a microphone in a 
bedroom or bathroom}: 

C) (U//FQUO) Application is based on ‘blasted spcciticitv" ti.v,. “roving” interception) under IS 
LI.S.C„$25ltt{M|fa)and{b): 

D) (U//FOUO) Application concerns a Domestic Terrorism (DT), Internationa] Terrorism, or 
Espionage investigation; or 

El (U//FOUO) Any situation deemed appropriate by the AD of CID or OGC. 

(U/iTOUO) The following two sensitive circumstances require the approval of the Director, 
the Acting Director. Deputy Director, or the Executive Assistant Director (EAD) for the 
Criminal Cyber Response and Services Branch or National Security Branch, or the respective 
Assistant Director for Criminal Investigative Division (CID), Cyber Division, 
Counterterrorism Division (CTD), Weapons of Mass Destruction Directorate (WMDD), or 
Counterintelligence Division (CD): 

A) (U//FOUO) “Emergency 1 " Title II J interceptions (i.e., interceptions conducted prior to judicial 
approval under 18 U.S.C § 2518(7*); or 

H) (U//FODd) It is anticipated that conversations of members of Congress, federal judges, high- 
level federal officials, high-level state executives, or members of a state judiciary or 
legislature will be intercepted. 

(U'KOUO) "Sensitive circumstances^ may develop at any poinL in time during the course of a 
Title ill. For example, while an initial application for interceptions might not be considered 
sensitive, conversations intercepted thereafter of a high-level state executive would render any 
subsequent spinoffs* extensions, or renewals "■sensitive" Title 111 requests. 

18.7.2.7 (U) Procedures For Emergency Title 111 Interceptions 

(U VFDUO) IH U,S C £ 2518(7) provides that any investigative or Saw enforcement officer, 
specially designated by the Attorney General, Deputy Attorney General, or the Associate 
Attorney General, who reasonably determines that an emergency situation exists that requires 
communications to be intercepted before an order authorizing such interception can, with due 
diligence, be obtained, and there arc grounds upon which an order could be entered 
authorizing interception, may intercept such communications, 

(U//FOUO) Section 25 18(7) postpones, rather than eliminates the need for judicial 
authorization. If the Attorney General* Deputy Attorney General, or the Associate Attorney 
General authorizes an appropriate FBI official to approve an emergency Title III interception, 
an after-the-fact application for an order approving the interception must be made in 
accordance with Title III to the appropriate Court, and an order obtained, within 48 hours after 
the interception has occurred or begins to occur. 

( U'.TOUO) All emergency interceptions must be coordinated with the Department oT Justice, 
Office of Enforcement Operations (DOJ/OEO). No SAC or FBIHQ official has the authority 
on his/her own to authorize interception of wire, oral, or electronic communications, even 
under emergency circumstances and/or where a human life is in jeopardy. The use of 
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emergency Title III interceptions is a "sensitive circumstance' 1 requiring the approval of the 
Director, Deputy Director. EAD for the Criminal Cyber Response and Services Branch, HAD 
for the National Security Branch, or the respective Assistant Director for Criminal 
Investigative Division fCIDk Cyber Division, Counterterrorism Division (CTD), 
Counterintelligence Division {CD), or Weapons of Mass Destruction Directorate (WML1DL 
Sec DIOCi Section 18,7,2,2. 

( U ) IS U.S.C. § 25 18{7) deli nos an emergency .situation as one involving: 

A) (. U ) immediate danger of death or serious physical injury to any person, 

B> |LI) conspiratorial activities threatening the rational security interest, or 

O (U> conspiratorial activities characteristic of organized crime. 

(LvY FOLIO) In all but the most unusual circumstances, the only situations likely to constitute 
an emergency by the Department of Justice (DOJI are those involving an imminent threat to 
life, e g., a kidnapping, hostage taking, or imminent terrorist activity. 

I B. 7. 2. 7.1 (U) Quta /jV/jVC Emergency A uthor/za thm 

(U//FQUO) Should a situation arise requiring emergency Title 111 authority, the field office, 
with the approval of the SAC. should do the following: 

A) (LI//FOUO) Notify the appropriate United States Attorney's Office (USAO) to coordinate the 
determination of whether the facts and eireumslanees meet ihe requirements of I S U.S.C. tj 
251 S{7). Generally, the AUSA will contact the tX>i OhO. which will initiate and coordinate 
the approval process lor DOT auihori/aliort. Should an A US A not he readily available, Lhe 
field office should contact (XK\ which will contact OtO directly, For emergency Title III 
requests involving Criminal, DT, WMD, or Cyber matters, contact should be made with the 
Unit Chief. Investigative Law- Unit, ILTB. For emergency Title 111 requests involving 
Counterintelligence matters, contact should be made with the Unit Chief, Counterintelligence 
Law Unit. NSL B, For emergency Tide 111 requests involving international terrorism matters, 
contact should be made with the I !mt Chief, Counterterrorism Law- Unit 1 or H, NSLB- Should 
contact be made directly between the FBI andOEO, the appropriate Lfoited States Attorney's 
Office should be notified as soon thereafter us possible. 

B} lU'VFOUOVTelephoniealJy advise the appropriate operational unit at FHIIiQ oldie emergence 
request and immediately subm.il a written Request for Emergency Title III. cither via facsimile 
or via email as an attachment- A sample Request Ibr emergency Title III Idrm is located in 
DIOG Appendix H. The Request for Emergency Title Ell should be filled out by the case agent 
or another law enforcement officer form liar with the specific facts of the investigation and 
shall include a concise written statement of the facts, circumstances, and probable cause 
supporting the request for interception, as well as an indication of the nature of the emergency, 
it.e., immediate danger of death or serious physical injury to any person), The operational 
FBIHQ unit will then convey the facts and circumstances supporting the request to OUT to 
determine whether the statutory requirements for an emergency and probable cause for an 
interception exist. If emergency authority is determined to be appropriate, the operational umi 
wilt then take the steps necessary to present the request to die Director, or his designee tor 
approval. 

O lU'TFQUG) During off-duty hours, requesting field offices should direct emergency 1'itle ID 
requests to the FBI’s Strategic Information and Operations Center I SIOC). which will comae: 
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the appropriate operational unit. Unless tune does not permit, OGC concurrence should be 
obtained during off-duty hours a* well. 

D) (U//FOU0J Notify the TA and the "FT A to coordinate technical equipment requirements, 

(U.7FOUO) While the FBI HQ operauonal unit is processing the emergency Lille til request 
for approval, OEO will be doing the same. If DQJ agrees to the request, OEQ will contact 
FBI I IQ and the A USA to advise u of that fact. The Director, or his designee will iJten contact 
the AG or his designee personally and request authorization to make the final probable anise 
determination and lo authorize electronic surveillance pursuant to IS U.S.C. $ 25 1 St 7), The 
Director, Acting Director, or his designee will then notify' the operational unit of the exact 
time the AG or his designee granted authority to proceed. The individual in the operational 
unit at FBI HQ who receives the information regarding the AG authority to proceed must note 
the exact tim e of the authorization on the "Emergency Electronic Surveillance Authorization 
Verification Form." The form is aft Emergency Electronic Surveillance Authorization 
Verificatio n The operational unit tmal then contact OEO and relay this information. OLD is 
responsible for recontacting the AUSA to advise him/her when the 48-hour period began. 

/ 8. 7.2. 7.2 (U) Post- Emergency A uthori/a tiqn 

(U/FOUO) Once the AG or his designee has authorized the Director, or his designee to make 
the determination whether to proceed with the emergency Title HI, the government has 4K 
hours (including weekends and holidays I from the time the AG granted authorization to apply 
for a court, order approving the interception. The field office, in coondi nation with the AUSA, 
must immediately begin preparing an affidavit, application and proposed order for court 
authorization. 

(U/F0UO) The affidavit in support of the after- the-facl application to the court for an order 
approving the emergency interception must contain only (hose facts known to the AG or his 
designee at the time the emergency interception w r as approved. The application must be 
accompanied by the “Emergency Electronic Surveillance Authorization Verification’ 1 form, 
w hich must reflect the date and time of the emergency authorization 

(U/FOUO) The government may also request, at the time it files for court-authorization for 
the emergency, court-authorization to continue the intercept ion beyond the initial 48 hour 
period. If continued authorization is sought at the same time, one affidavit may be submitted 
in support of both requests. However, the affidavit must dearly indicate what information was 
communicated to the AG or his designee at the time the emergency interception was approved 
and what information was developed thereafter. Two separate applications and proposed 
orders should be submitted to the court in this situation - one set for the emergency and one 
set for the extension. If continued interceptions are not being sought, no further authorization 
is needed from OEO The AUSA should, however, still submit the application, affidavit, and 
order to OEO for review. If continued interceptions are sought, that application, affidavit, and 
order must be reviewed by OEO and approved by DQJ like any other Title 111 request, in 
either situation, the affidavit must also be submitted through the operational unit for OGC 
review, when time allows. 

(U/FOUO) DOJ policy provides that if the AG or his designee authorizes the Director, or his 
designee to approve an emergency Title III interception, a court order should be sought by 
filing the affidavit and application, regardless of whether an interception occurs. In the event 
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that the need lor electronic surveillance is eliminated following authorisation but prior to the 
installation and activation of the technical equipment, the submission of an affidavit and 
application is not necessary. 

(U/FOUO) Pursuant to 18 U.S.C. Jj 2518(7), in the absence of a court order, interception shall 
immediately terminate when the communication sought is obtained or when the application 
for the order is denied, whichever is earlier. In the event an application for approval is denied, 
or in any other case where the interception is terminated without an order having been issued, 
the contents of any wire, ora!, or electronic communication intercepted shall be treated as 
having; been obtained in violation of Title 111, and an inventory shall be served on the person 
named in the application. 

(U/FOUO} The following sample form? arc available for use in connection with an 
emergency Title 111 request; 

A) ( U/FOUO) Emergency Title II J Protocol Cheek Jist for C'DCs 

B) ( U/FOUO) Requeue I nr Emergency Tide Ilf 

C > ( U/FOUO) Emergency Electronic Surveillance A uihori ration Verification 

(U/FOUO) In addition, sample pleadings ear be found on the DGJ Net website for the DOJ 
Electronic Surveillance Unit, or in the DQJ Electronic Surveillance Manual , including: 

A) (U'FOUO) Application tor Approval of Emergency Interception of Oral, Wire, or Electronic 
Communka lions under IS U.S.C. § 2518(7) 

Bt (U/FOUO) Affidavit in Support of Application for Approval of Emergency Interception of 
Wire. Oral, or Electronic Communications under IS U.S.C. <; 251 8(7} 

C) (U/FOUO) Order Approving Emergency Interception of Wire, Oral, or Electronic 
Communications under IS U.S.C. § 25 L 5(7} 

18,7,2.8 (U) Pre-Title 111 Electronic Surveillance (ELS UR) Search Policv 

( U/FOUO) 18 L'.S.C $ 25 I8( 1 )(e) requires that each application lbr an Order Lo intercept wire, 
oral, or electronic communications (hereinafter ‘Title III”) contain a statement describing all 
previous applications for Title III surveillance of the same persons, facilities, or places named 
in (he current application. The policy in this DIOG is designed to conform with this statutory 
requirement, clarify any past confusion, and address the effects on the previous search policy 
resulting from the recent elimination of the requirement for an agency Action Memorandum 
by the DOJ OEO, This DEOG policy supersedes the March 5, 2003 Director's Memorandum 
to All Special Agents in Charge Re; Pre-Title 111 Electronic Surveillance (LLSUR) Search 
Policy, and the April 14,2008, All Field Offices LC from RMD, Case ID** 321B-HCJ- 
Cl 186218. 

( L ■ ) For specific details on how to conduct and document such ELS UR searches, sec 
Appendix H. 
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18*7,2+9 (U] Duration of Approval for Title III 

(U) Court orders issued pursuant to Title I El are fora period riot to exceed 30 days. An 
"extension’’ order may be sought to continue monitoring beyond the initial 30-day period 
without a lapse in time, When a break in coverage has occurred, a ‘‘renewal" order may be 
sought to continue monitoring the same intyreeplccs and facilities identified in the original 
order. The affidavit and application in support of an extension or renewal must comply w ith 
all of the Title Til requirements, including approval of the Attorney General or designee. 

18.7.2+10 fU] Specific Procedures for Title 111 Affidavits 

(U//FOUO) The requirements in 1 8 U.S.C. $ 25 IS must be Followed when preparing a Title 
IE) affidavit. The Title 111 affidavit must include the following information: 

A I (U//FOUO) The identity and qualifications of the affiant must be articulated:; 

B) (U//FOUO) For the interception of wire or oral communications, the affidavit must establish 
probable cause to believe a violation of at least one of the offenses enumerated in IS U.S.C - § 
25 1 6{ 1 ) has been, is being, or will be committed. For the interception of electronic 
communications, the affidavit must establish probable cause to believe that some federal 
felony has heen. is being, or wilt be committed: 

C) (U/TFOUG) The affidavit must set forth the identities of those persons, if known, for whom 
Ihere is probable cause to believe they are commuting the alleged offenses, even if it is not 
believed they will be intercepted over the target Facility. This group of individuals is often 
referred to as the “Subjects." “Inlcrceplees" may be listed separately; "intereeptee" are those 
Subjects who are expected to be intercepted; 

D) (UZ/FOUG) Probable cause must be current and relevant to the use of the particular facilities 
for w hich interception is sought; 

Et (UZ/FQUG)The necessity for the Title 111 must be articulated. There must be a factual basis 
lor concluding that alternative investigative procedures have been tried and failed or a 
demonstration why these procedures appear to be unlikely to succeed or would be too 
dangerous if tried (’'boilerplate" statements in this respect are unacceptable); 

F) (UZ/FOtJO) Interceptions must be mini missed, as statutorily required; 

G) (UZ/FQUO) The facility or premises to be intercepted must be described fully, including a 
diagram, if possible, ifmicrophone installation is contemplated (surreptitious entries may not 
be conducted for the purpose of preparing a diagram): 

H) (UZ/FQUO) Whether the request involves any of the seven (7) “sensitive circumstances"; and 

I) t U//FOUO) A statement describing all previous applications for Title III surveillance of the 
same persons (both subjects and interceptecs) T facilities or places named in the current 
affidavit, To comply with this requirement, a ’'search/' e.g,, an automated indices search of the 
FUffi ELSUR Records System (HRS) and the systems, of other appropriate agencies, must he 
conducted prior to submitting the Title 111 affidavit to the DOJ GEO (non-sensitive 
circumstances) or to the responsible FBETIQ operational unil (sensitive circ^imstaftcts). The 
squad S&A is responsible for verifying that pre-Title III ELSUR cheeks have been completed 
before the affidavit is sent to the court. The ELSUR Operations Technician (EOT) and the 
ELSUR supervisor are responsible for con filming that ELSUR searches were properly 
conducted as set forth in the final affidavit submitted to the court, 
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(U/AFOUG) At least EO days prior to submitting the original Title Lit request to DGJ OEG, the 
field office must forward an electronic communication to FBI HQ sotting forth by separate 
subheading; a synopsis of the investigation; the priority of the investigation within the office; 
the anticipated manpower and/or linguistic requirements and outside support, if any, that will 
be needed; a synopsis of the probable cause supporting the Title III application; (he 
prosecutive opinion of the USAO; and description of the imenccptecs. If a field office is 
unable to submit the EC 10 days prior to submitting the request to DOJ OEO, the field office 
must advise the operational unit immediately and note the circumstances that prevent timely 
notification. 

(U./FOUG) Case agents must use the (Prc Title II! checklist) to guide them through 

completion of all compliance requirements for Title III. 

18.7.2.11 [U } D ISPUTE RESOL UTKW FOR TITLE 1 1 1 APPLICATIONS 

( UATOUG) When there are legal quest ions/conce ms that cannot be resolved through 
discussions with reviewing officials at DOJ. the responsible FBTHQ operational division 
supervisors or executives must forward the application to OGC for its review, advice, and 
recommendation . 

18.7.2.12 [U] Notice and Reporting Requirements - Title 111 

(U//FQUO) The anticipated interception, of conversations related to a "Sensitive Investigative 
Matter" as defined in the AGG-Dom, Part Vil.N, requires notice to the appropriate FBIHQ 
Unit Chief and Section Chief, and DOJ Criminal Division. A ote ; A sensitive investigative 
matter (SIM) is not the same as a sensitive circumstance described above. 

(Ui.FOUO) Within 14 days of obtaining court authority for an original Title 111 initiation, the 
field office must submit a: |i| signed copy of the Title III order and supporting affidavit; (ii) 
completed CDC Checklist (FLMJ26); and tiii) FD-669 authorized by the SAC/ to: 

A) (U//FOUO) The appropriate FBll IQ operational unit; 

B) (U//FOUG) In applicable drug and money laundering investigations (described in the 
appropriate CID PG}*a copy of the affidavit to Special Operations Division* Chantilly. 
Virginia: 

(U//FOUO) A copy of the DOJ memorandum directed to the AUSA entitled "Authorization 
for Interception Order Application" must be provided to the EOT. 

(U//FOUO) During an authorized intercept, the case agent, in coordination with the 
prosecuting attorney, must submit periodic investigative activity reports io the authorizing 
court for oversight of investigative progress (usually every 10 or 15 days), Activity reports 
must be placed in the investigative file, 

(U//F0UO) Within 14 days of the conclusion of Title 111 ELSUR activity, the ease agent must 
advise the operational FBI1IQ investigative program by EC that the surveillance has 
concluded. 
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(U//FOUO) Upon completion of Title 111 ELSUR activity, the Excel WT2 workbook, most be 
submitted by EOU as required by Corporate Policy 01 62N. For details on the completion and 
submission of the Excel WT2 workbook, see Corporate Policy 0I62N , 
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1 8 : 73 (U) In vestiga ti ve Method: Electronic 5 ur VEIUANCE - FISA and FISA 

Title VII (acquisition of foreign intelligence information) 

18*7.3,1 (U) Summary 

(U//FOUO) ELS UR conducted pursuant to the Foreign intelligence Surveillance Act (FISA) 
is a va I Liable investigative melhod. It is. also, a very intrusive means of acquiring information 
relevant to the effective execution of the FBFs national security and intelligence missions. To 
ensure that due consideration is given to the competing interests between national security and 
the effect on privacy and civil liberties, this section contains various administrative and 
management controls beyond those imposed by statute and DQJ guidelines. Unless otherwise 
noted, it is the responsibility of the case agent and his her supervisor to ensure compliance 
with these instructions* FISA ELSUR is only authorized as an investigative method in the 
conduct of Full Investigations, FISA ELSUR requires: (i) admin strati ve or judicial 
authorization prior to its use; (ii) contact with the field office ELSUR Technician to 
coordinate all necessary recordkeeping; and (iii) consultation with the Technical Advisor 
ITA) or a designated TTA lo determine feasibility, applicability, and use of the appropriate 
equipment* 

I U//FQUO li App/kmiitti : FISA ELSUR may be used in a Full (national security) Investigation 
and to collect foreign intelligence information. This method may not be used for: (i) an 
Assessment or Preliminary Investigation; or (ii) providing assistance to other agencies, unless 
there is already an FBI FISA related to the request for assistance. Attorney General approval 
must be obtained prior to using FISA-obtaincd or derived information in any proceeding 
whether foreign or domestic. When providing assistance to a foreign ageney, information 
must be provided pursuant lo the FBFs Foreign Dissemination Manual and the FBI's Standard 
Minimization Procedures or other applicable minimization procedures. 

I U) This section is divided below into FISA (18*7.3.2) and FISA Title VII (18.7.32). 

18,7*3.2 ( U ) FoftEi u n Intelligence Suhvei llance Act (FIS A J 

1 8. 7 . 3.2 A ( U) Legal Authority 

(U| SO U*S.C* §§ 1801- 1 81 1 (FISA) and E.O. 12333 § 15. 
ftJ.) FISA Amendments Act of 2008 (P.LNo. 1 10-2613, 

I B. 7.3.2. 2 (U) Definition of Investiga tive Method 

(L) FISA is the non -consensual electronic collection of information (usually communications) 
under circumstances in which the parties have a reasonable expectation of privacy and court 
■orders or warrants are required. 
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i ft 7, 3:2. 3 (U) Standards for Use a nd appro val Requirements for FISA 

I8.7J,2.3,1 (U) FISA Rfoi fst Form 

(U//FOUO) FB1HQ and field office requests For FISC LL5EJR orders must use the FISA 
Request Form . Field office requests for FISA orders are submitted and tracked through 
Ft SAMS . The FISA request forms, in a question and answer formal, have been designed 
to ensure that ali information needed for the preparation of a l-'JSC application is provided 
to FBLHQ and to the DOJ, 

1 B.7J .2.3.2 (U) CERTIFICATE BV THE DIRECTOR OF THE FBI 

(U) Each FISA application must be accompanied by a Certification by the Director of the 
FBI or one of nine other individuals authorized by Congress or the President to provide 
such certifications that! the information being sought is foreign intelligence information; 
that a significant purpose of the electronic surv eillance is to obtain Foreign intelligence 
information; that such information cannot reasonably be obtained by normal investigative 
techniques; that the information sought is "foreign intelligence information 1 ' as defined 
by FISA. The certification must include a statement explaining the certifier's basis for the 
certification. 

(If) Title 50 of the United States Code Section I HEM specifies the Assistant to the 
President for National Security Affairs; E.O 12139 as amended by L.O. 13383 specifies 
the Director of the FBI, Deputy Director of the FBI, the Director of National Intelligence, 
the Principal Deputy Director of National Intelligence, the Director of the Central 
Intelligence Agency, the Secretary of State, the Deputy Secretary of State, the Secretary 
of Defense, and the Deputy Secretary of Defense as appropriate officials to make 
certifications required by FISA, The FBI Director has represented lo Congress that the 
FBI Deputy Director will only certify FISA’s when the FBI Director is not available to 
do so. 

1 8.7. 3.2 (U) Emergency FISA Authority (50 U.5,C § 1805|f|) 

(U) The Attorney General, on request from the Director of the FBI or his/her designee, 
may authorize an emergency FISA for electronic surveillance when it is reasonably 
determined that an emergency situation exists that precludes advance FISC review and 
approval and that a factual predication Ebr the issuance of a FISA Order exists, A FISC 
judge must be informed by DOJ at the Lime of the emergency authorization and an 
application must be submitted to that judge as soon as is practicable but not more than 
seven (7 1 days after the emergency authority has been approved by the Attorney General. 
If a court order is denied after an emergency surveillance has been opened, no 
information gathered as a result of the surveillance may be used as evidence or disclosed 
in any trial or other proceeding, and no information concerning any USPFR acquired 
from such surveillance may be used or disclosed in any manner, except with the approval 
of the Attorney General if the information indicates a threat of death or serious bodily 
harm to any person. 
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(UATOUG) For an emergency FISA for electronic surveillance. DOJ 01 can he reached 
during regular business hours at (20(2) 534-5600 or through the DOJ Command Center at 
(202) 5 14-5000 at any time. 

1 8. 7. 3.2 . 4 (U) Dura tio\ of Approval for FISA 

( U.'/FOUO) Authorization for FLSUR surveillance exists for the period oi time specified in 
the FISC’r order, which will not exceed: 90 days for USPERs: 120 days tor iwn-USPERs; 
and one year for a foreign power, as dc lined in 50 U.S.C. $ 3 80 1 (a) ( I )(2 J or (3). For 
USPERs;, renewals of FISA Orders may be requested and authorized for a period of 90 days 
based upon a continued showing of probable cause. For non-US PERs. renewals can he for a 
period not to exceed one year. All renewal requests must be submitted to DOJ NSD by the 
requesting field office at least 45 days prior to the expiration of the existing order. These 
requests must be submitted using the FISA Request Form process in F1SAMS. 

1 8. 7 ; 3. 2. 5 (U//FOUO ) Specific Procedures for FISA 

(U//FOUO) FISA related initiation and renewal procedures are contained within the FESA 
Initiation Form which can be found within f ISAMS or on the Forms section of the NSLB 
library . 

18.7.3.2.5. L (U/fFOUO) FISA VERIFICATION OF ACCURACY PROCEDURES 

(U//FOUO) The accuracy of information contained within FISA applications is of utmost 
importance: accordingly, the information must he reviewed in accordance with the FISA 
Accuracy Policy Implementation Guide. 

(U//FOUO) Only documented and verified information may be used to support FBI 
applications to the court. In addition to the certifications required through FlSAMS, the 
following administrative procedures must he followed for every FISA application: 

A) (U//FQUO) fcacii investigative file for which an application is prepared for submission to the 
FISC must include a FISA Accuracy sub-file. This sub-file must he used for copies of all of 
the supporting documentation relied upon when making the certifications contained on the 
FISA Verification Form (“Woods Form”), which is available in the Forms section of the 
NSLB library at 

http ; /'/home, fbmet fbi/DO/OGC Mam%20Lavv%20Li brarv/Fomns/NSL B%20 L ibrarv . a 
SPX 

(U//FOUO) The FISA accuracy sub-file must include: 

1) (U//FOUO) FBI database checks that were conducted to determine whether tlie target of 
the proposed FISA is also the subject of an FBI criminal investigation, past or present: 

2) (U J/FOUO) CHS file checks (DELTA, 3 34. 137, 270, and 307 files) dial were conducted to 
determine whether the target has, or has had. a relationship with the FBI as a CHS: and 

3) (U/i'FOUCri Copies of the most authoritative documents dial exist for each fact asserted in 
the application. The most authoritative document may be a cable, EL\ letterhead 
memorandum (LHM), FISA intercept ("lech cut 1 ”), etc. The agent must use some judgment 
in ascertaining appropriate doeu mentation, but, in general, the agent should altempl to get 
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as close as possible to original documentation of a fact. For example, if the targets 
immigration status is summarised in an EC, the agent should strive to obtain a copy of the 
underlying immigration document to verify the Fact(s) asserted rather than relying on the 
BC, Similarly, if the application states that a National Security Letter (NSL) was served on 
a certain date, there should be a copy of the NSL in the subfile instead of the EC that slates 
an NSL was served, For more guidance on this issue, see FISA Accuracy PG at: 
lmpt//homti/ forms/fd 1 028/ Pol icv%20and%20Gii ldancc%20Librarv. J 03 PCi . pd l' 

B) (U//FOUO) Every FISA application is subject to review through two oversight mechanisms 
designed to ensure that FBI Held offices are hiking appropriate steps regarding the Factual 
accuracy or statements to the FISC- First, CDCs in the field are required to conduct accuracy 
reviews of limited numbers of FISAs in accordance with procedures established by the 
General Counsel. Second, OI attorneys conduct accuracy reviews with CDC and NSLB 
participation on approximately an annual basis. A full description of each of these reviews can 
be found in Lhc FISA Accuracy PG at: 

h ttp h'/home/foirns/ fd I (128/Polic v%20and%20G uidanoe%2fl I -ibrafv/0394 PG.nd f 

1 8.73*2,5*2 (U) Use of FISA Derived Information in Other Proceedings 

(U//FOUO) There are statutory (50 U.S.C. Sections 1 806, 1825, and 1845) and Attorney 
General (AG) policy restrictions on the use of information derived from a FISA ELSUR. 
physical search, or PR/TT. These restrictions apply to and must be followed by anyone 
'who may seek to use or disclose FISA information in any trial, hearing, or other 
proceeding in or before any court, department, officer, agency, regulatory body, or other 
authority of the United Slates. . . See DIOG Appendix E for the AG Memo. Revised 
Policy on the Use or Disclosure of FISA Information, dated 0 ]- 1 0-2008. The guidance in 
the AG s Memo establishes noiifteation approval procedures which must be strictly 
followed. Though not contained in the AG Memo. FBI policy requires that use authority 
be obtained for foreign proceedings as well. Questions, concerning the FI 5 A use policy or 
requests for assistance in obtaining FISA use authority from the AG should be directed to 
NSLB’s Classified Litigation Support Unit 

(U//FQUO) The United States must, prior to the trial, hearing, or other proceeding or at a 
reasonable lime prior to an effort to disclose or use that information or submit il into 
evidence* notify the ‘'aggrieved person 1 * [as defined in 50 U.S.C. Sections 1801 (k), 
1821(2), or 1841(2)], and the court or other authority in w hich the information is to be 
disclosed or used, that the United Stales intends to disclose or use such information. See 
50 U.S.C. Sections 1806(c), 1825(d), and 1845(c). 

18.73.2,53 (LIj'VFOUO) FIS A Electronic Surveillance Administrate e Sl b- 

FlLE 

(U//FGUO) Each investigative file for which an application is or has been prepared for 
submission to the FISC must include a sub-file labeled FISA Electronic Surveillance 
Administration Sub-File. This subfile must contain copies of all applications to and 
orders issued by the FISC for the conduct of electronic surveillance in the invcstigati'T 
The following data must be included in the FISA FJectronic Surveillance Admin i strati’. . 
Sub- file: 


Version fl-ited: 
October 15.2EI11 


18-178 

UNCLASSIFIED FOR OFFICIAL USE ONLY 



UNCLASSIFIED FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


§18 


A ) (U//FOUO) The identities of the persons or entities that are the subject of the electronic 
surveillance; and 

R) (.U//FOU0) The description ofihe facility (hat is the subject of (he elecirontc surveillance. 

18,7*3X5.4 (IWFOLTQ) FISA Review Boahd 

{ U/ FOUOJ A FISA Review Board (hereinafter "Board") has been established that is 
responsible for reviewing, on a monthly basis, those FISAs (other than certain USAs 
from the Counterintelligence Division) that have been maintained for more than one year. 
The Board's meeting schedule and requirements for renewal requests are contained and 
processed through FIS, AMS . 

(LV/FOUO) In determining whether to approve continued renewal of a FISA beyond one 
1 1 ) year, the Board assesses the quality and quantify of foreign intelligence that has been 
generated by the FISA; the continued reed for the foreign intelligence that is being 
generated by the coverage; the strategy and timing of any criminal prosecution that might 
be contemplated against the target: any backlog in translation of the results of the 
surveillance; and the relative risk to national security if the FISA is not renewed. 

(U//FOUO) FES Ah that arc not approved for renewal will be accompanied by an 
explanation of the reason for denial. FISAs with a dissenting opinion will be forwarded to 
the F.AD NSB for an expeditious review. The Review Board's decision on renewals with 
dissenting opinions will be final, unless overruled by the FAD NSB. 

I H. 7. 3. 2. 5.4. 1 (V) A PPL A UHG THE D£ClSfO.\ OP THP Rt i JEW BO.t fl/J 

(LV. FOEJO) Should the field office responsible for a FISA disagree with the decision of 
the Board, the field office responsible for the FISA may present this concern, by EC, to 
the Assistant Director (AD) responsible for the FISA. The AD will consider the merits of 
any additional information not previously submitted in writing to the Board and may 
choose to present a written appeal {EC) for further consideration to the EAD NSB. An 
EC documenting the decision of the EAD musi be provided to the field office promptly 
upon the EAD's NSB final decision. 

1 8. 7.3.2. 6 (V) Notice ahd Repor ting REQumEMENTS for FISA 

l FOLIO) All FISA related ELStJR notice and reporting requirements can be found in 50 
1. S.C §§ 1 806- 18(18 and are contained within FIS AMS. 

1 8. 7.3.2. 7 (U) Compua ncl and MONITORING ton FISA 

I FOUO ) All compliance issues related to FISA ELSL'R must be reported lo the Unit Chief 
■ OGC National Security Law Policy and Training Unit, or successor position (soon to be 
renamed the OGC National Security Law Compliance, Oversight, and Training Unit). 
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1 8. 7.3. 2.8 ( U) Special Circumsta nces fop FISA 

(U) Under 50 U.S.C. § IKG2 r the President, through the Attorney General, may authorize 
electronic surveillance under HSA without a court order for periods of up to one year, if the 
Attorney General certifies in writing under oath that the surveillance will be solely directed at 
acquiring communications that are transmitted by means that are exclusively between or 
among foreign powers and there is no substantial likelihood of the surveillance acquiring the 
contents of communications to which USPERs are parties. 

1 8 . 7.3.2. 9 (U) FISA 0 VERCOLL ECHOS 

(U//FOUO) In accordance with Foreign Intelligence Surveillance Court (FISC) Rule of 
Procedure 15, information acquired outside of the scope of the FISA authorization (“FISA 
overcollection'" It will no longer be sequestered with the FISC, absent extraordinary 
circumstances. Contact NS LB for further guidance regarding the handling oT any FISA 
overcoIlectioiL 


1 8, 7.3. 2,10 (U) Other Applica bl e Policies 
L8.TJ.2.HM (U)FrSA 

A) (U//FOUO) CD 'Policy Guide 

B) fU//FOUO) CTD Policy Guide 

C) (U//FOUO) hivcsligalive Law Unit Library 

D ) (U//FOUO) For d an Intel Hirers Surveillance Act (FISA) Un i t 

18.7.3.3 ( U } F I S A Title VI I ( acq uis ition of for ei gn i ntelugenc e in formation] 

1 8. 7.3.3. 1 (U) SUMMA R ¥ 

(U) Titles I and Ell nf the FISA {codified as 50 U.S.C, §§ 1801, et seq,) provide the standard 
traditional methods of collection against agents nf foreign powers (including USPERs and 
non-USFERs] and foreign establishments inside the United States. Title VII nf FISA. 
“Additional Procedures Regarding Certain Persons Outside the United Slates," provides . 
means to target non-U SPF.Rs reasonably believed to be located oulsidc the United State- 

1 8. 7.3.3. 2 { Li) legal Authority 

A) ( U I FISA Amendment:; Act nf 2tK)8 ( 1 22 Slat 24.1ft) 

B) IU] AGG-Doni, Part V . A. 13 

is. 7.3.3. 3 { f/j Definition of Investiga tive Method 

(UJ Title VII may be usoci fur enn dueling FISAs on certain persons located outside the 
States. 
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1 8. 7.3.3. 4 (U//FOUO) Standards for Use and Appro val Requirements for 

tNVESTIGA Tt VE METHOD 

(LpFGUO) See requirements under DIOG Sections 1 8.7,1, 18.7.2, and 18.7,3 and 

requirements specified above. 

18. 733, 5 ( U) Dura tion of A pprova l 

(U//FOUO) See requirements under D JOG Sections IS. 7.1, 18.7.2, and 18.7.3 above. 

18. 73. 3. 6 (U//FOUO) Specific Collection Procedures for Title VII 

( U) The relevant procedures {or collections) under Title VII arer 

18*733*6.1 (U) Section 702 - Procedures for Targeting Non-U. S, Persons 

(non-USPERs) Who Are Outside the United states 

(U//.FOUQ) Under Section 702, the Government has the authority to target non-USPERs 
who are located outside the United States if the collection is effected with the assistance 
of an electronic communication service provider, as that term is defined in FISA. This 
section does not require a traditional FISA request. Rather, under this section, the 
Attorney General and the Director of National Intelligence may authorize, for periods of 
up to one year, the targeting of non-Unlted States persons reasonably believed to be 
located outside the United States to acquire foreign intelligence information, provided 
they execute a Certification that is submitted to and approved by the FISC. The 
Certifications are accompanied by an affidavit signed by the FBI Director. In addition, 
the FBI is required to file "Targeting Procedures 1 ' that ensure that only nun-U,S. persons 
(non-U SFb-Rs) reasonably believed to be loeated outside the United States will be 
targeted for collection and ’To prevent the intentional acquisition of any communications 
as to which the sender and all intended recipients are known at the time of the acquisition 
to be located in the United Slates." Additionally, the statute prohibits targeting any person 
reasonably believed to be loeated outside the United Stales for the purpose of obtaining 
the communications of a particular, known person reasonably believed to be in the United 
Slates. Finally, the FBI is also required to follow 702-specific minimisation procedures. 

1 8,7.33.6,2 (U ) Section 7(13 - Cert a i n Acqu i si t ions Ins i de the United States 

Targeting United St ates Persons Outside the United States 

(U//FOU0) Under Section 703, the Government has the authority to targel USPERs who 
arc reasonably believed to be located outside the United States if the collection is effected 
with the assistance of a United States provider and if the collection occurs inside the 
United Slates. This section only authorizes electronic surveillance or the acquisition of 
stored electronic communications or stored electronic data that requires a court order, 
e.g,, n on-consensual collection. FISA 703 is an alternative to traditional FISA electronic 
surveillance (Title [) or physical search (Title IN) authority when the facts meet the 703 
criteria. There are two notable differences between Section 703 and traditional FISA 
authorities. First, although Ihe application must identify any electronic communication 
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service provider necessary to effect the acquisition, the application is not required to 
identify the specific facilities* places, premises, or property at which the acquisition wilt 
be directed. Second. Section 703 allows for the targeting of a US PER who is "an officer 
or employee of a foreign power," even if the target is not knowingly engaging in 
clandestine intelligence gathering activities, sabotage, or Internationa] terrorism. To 
obtain authority to collect information under this section, the FBI must submit a FISA 
request and obtain a FISC Order and secondary orders, as needed. The process to obtain 
that order is the same as the standard FISA process. Refer to the FISA Unit’s website for 
further information. Section 703 also allows for emergency authorization. Unlike 
traditional FISA orders, however, surveillance authorized pursuant to this section must 
cease immediately if the target enters the United States. If the FBI wishes to continue 
surveillance of the USPER while he or she is in the United States, the FBI must obtain a 
separate court order under Title I (electronic surveillance} and/or Title 111 (physical 
search) of FISA in order to conduct electronic surveillance or a physical search of that 
USPER while the person js located in the United States. The use of any information 
collected using FISA 703 authority must comply with the applicable minimization 
procedures, 

1 8.7 J. 3.6. 3 (U) Section 704 - o i her acquisitions Target isg Unit ed States 

Persons Outside the United States 

(U//FOUO) Under Section 704. the Government has the authority to target USPERs who 
are reasonably believed to be located outside the United States if the collection occurs 
outside the United States (i.e., without the assistance of a United Stales’ electronic 
communication service provider). The statute requires that the FISA court issue an order 
finding probable cause to believe that the USPER target is a foreign power, an agent of a 
foreign power, or an officer or employee of a foreign power and is reasonably believed to 
be located outside the United States "under circumstances in which the targeted United 
States person has a reasonable expectation of privacy and a warrant would be required if 
the acquisition were conducted in the United States for law enforcement purposes. 1 ' To 
obtain anihority to collect information under this section, the FBI must submit a FISA 
request and obtain a FISC order (the order will not include secondary orders). The 
process to obtain a FISA 704 order is similar to, but more streamlined than, that for 
obtaining a traditional FISA under the standard FISA process, There arc two notable 
differences between Section 704 and traditional FISA authorities. First, the application 
no| required to identify the specific facilities, places, premises, or property at which the 
acquisition will be directed. Second, Section 704 allows lor the targeting of “an officer or 
employee of a foreign power™ even if the target is not knowingly engaging in clandestine 
intelligence gathering activities, sabotage, or international terrorism. Refer to the FISA 
Unit's intranet website for further information. Section 704 also allows for emergency 
authorization. Unlike traditional FISA orders, however, surveillance authorized pursuant 
to this section must cease if the USPER enters the United States but may be re-started if 
the person is again reasonably believed to be outside the United Slates during the 
authorized period of surveillance If there is a need to continue surveillance while the 
target is located inside the United States a separate court order must be obtained. The u^- 
of any information collected using FISA 704 authority must comply with the applicable 
minimization procedures. 


Drtob-cr 15. 
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(U/VFOUO) Generally, the FBI requires the assistance of other US EC agencies to 
implement surveillance authorised pursuant to Section 704, Specific procedures exist for 
requesting such assistance. These procedures are classified and can he found til FBI 
Corporate Policy I 2 IN . 

1 8,7.3 J.6,4 (U) section 7(15 - Joint Applications and Concurrent 

Authorizations 

(U//FOU0) Section 705(a) "*joiiU applications'" allow the FISC", upon request of the FBI, 
to approve a joint application targeting an USPLR under both Sections 7(13 and 7(>4 
(authority to collect both when the person is inside and outside the United States). 

(U/7FOUO) Section 705(b) provides that if an order has been obtained under Section 105 
(electronic surveillance under Title E of FISA) or 304 (physical search under Title El l of 
FISA), the Attorney General may authorize the targeting of the US PER target while such 
person is reasonably believed to be located outside the United States, The Attorney 
General has this authority under E.Q, 12333 § 2.5. In other words, when the FISA Court 
authorizes surveillance of an US PER target, the Attorney General, under Section 705(b) 
and E.O 12333 $ 2.5, can simultaneously authorize surveillance to continue if the target 
travels outside the United States during the authorized period of the surveillance. 
According to Section 705(h), there is no need for a separate order pursuant to Section 703 
or 704. During the FESA drafting process, an FBI employee should determine whether 
surveillance or physical search may occur for purpose of acquiring foreign intelligence 
while the person is reasonably believed to be Outside the United States. If so, the FBI 
employee should consult with an DGC or DOJ-NSD attorney to ensure that appropriate 
language Is added to the application. 

(U/7FGUO) Oiler when surveilling a USPER overseas* the FBI requires the assistance of 
other U filC agencies. Specific procedures exist for requesting such assistance. These 
procedures are classified and can be found in FBI Corporate Po licy I 2]_N, 

L8.7_3A*,5 (Li) FISA Ovkroji lection 

(U//FOUQ) In accordance with Foreign Intelligence Surveillance Court (FISC) Rule of 
Procedure 15, information acquired outside of the scope of the FISA authorization 
(“FISA overcoilecticuT) will no longer be sequestered with the FISC* absent 
extraordinary circumstances. Contact NSLB for further guidance regarding the handling 
of any FISA over col lection. 
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19 (U) ARREST PROCEDURE POLICY 


1 9.1 (U) Arrest Warrants 

1 9.1.1 (U) Complaints 

(U) A complaint is a written statement of the facts necessary to establish probable cause to 
believe that an offense has been committed and that the defendant committed it A complaint is 
presented under oath before a magistrate judge, who may issue an arrest warrant or a summons 
for the defendant if he/she finds the complaint, establishes probable cause lo believe the 
defendant committed the charged offense. 

19.1.2 (U) Arrest Warrants 

)U'| Any justice, judge or magistrate judge of the United States has the authority to issue arrest 
warrants for any offense against the United States. In addition, if a federal judge is not available 
any justice of a state supreme court, mayor of a city, state or local judge, justice of the peace, or 
other magistrate of any state where the offender may be found can issue such warrants as long as 
he she is neutral, detached and capable of deciding probable cause. Copies of warrants issued 
under this authority are returned to the court of the United States that has jurisdiction over the 
offense. 

19.1.3 (V) Jurisdiction 

i V ) Federal rules do not limit the application for an arrest warrant lo any spec riled district. 
Usually, an application fora warrant will be made in the district where the offense was 
committed., but it may also be issued by a magistrate judge in the district where the offender is 
located. 

19.1.4 (U) Person to be Arrested 

iU) An arrest warrant must contain the name of the defendant or, if his/her name is unknown, 
any name or description by which the defendant can be identified with reasonable certainty. 

There is no requirement lo determine the defendant’s true name before a warrant can be issued. It 
is sufficient to develop facts which provide a reasonable belief that a particular individual is the 
offender. A warrant can be based on facts that provide a distinguishing physical description or 
describe the particular circumstances in which the defendant can be found. 
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19,2 (II) Arrest with Warrant 

19.2.1 ( U) Policy 

111) Whenever possible, an arrest warrant must be obtained prior to an arrest SSAs may 
authorize Agents |,J to execute arrest warrants and, in extraordinary circumstances, FRTHQ should 
be notified in advance of the arrest. For example, SSA’s should notify FRIHQ when the arrest 
may have a significant impact on an investigation in another Held office or when the arrest is 
likely to cause widespread publieily due to the identity or status of the arrestee or the nature of 
the crime. 

(U) Upon the execution of an arrest warrant, the apprehending Held office/division must 
promptly enter a "locate” within NCIC- The (Xf of the warrant must enter a "'clear” within NCIC 
within 24 hours of the '"locate." See the NCIC Field Division Guide, D145PG for detailed NCIC 
policy. 

19.2.2 (U) Promp t Execution 

I U'l While there is no time limit on the execution of arrest warrants {unlike search warrants), as a 
general rule Agents should make the arrest without prolonged delay after obtaining the warrant. 

19.2.3 (U) Arrest Plans 

(U) The SAC is responsible for ensuring that arrests are carefully and thoroughly planned. 

Proper planning and preparation for arrest situations can greatly enhance the safety and 
effectiveness of Agents and officers during these high-risk situations. Whenever possible, written 
arrest plans must be prepared prior to conducting law enforcement activities that may result in 
The arrest of a potentially dangerous subject. Arrest plans must address live topics: Situation, 
Mission, Execution, Administration and Equipment, and Control and Communications. The FD“ 
m, FBI A nest Plan Form, 

i f http : ''.''home, fb inct. lb:i ■' lonmritl 1 {ISS/Schtiaid.FumisTesl.T ' DKXX/dulault.aspx 1 must be utilized 
whenever possible. When briefing the arrest plan, the briefing Agent should stress to the 
participants of the operation that any arrest has the potential to become dangerous. Exigent 
circumstances may necessitate an oral briefing in lieu of a written plan, but the oral briefings 
must address the five topics required to he included in written plans. The planning and execution 
of arrests,, raids, and searches should be assigned to experienced Agents. All arrest plans must be 
approved by ASACs or their designees, 

(U ) The SSA may consider utilizing, and/or alerting local authorities to the planned arrest if 
appropriate under the circumstances. Although the time of notification is left to the discretion of 
the SSA, he/she must consider the jurisdiction of local law enforcement, its responsibility to its 
community and its need to be aware of law enforcement actions in its jurisdiction. 


i9 (U) The term "Agent" in the context uf this section includes FBI Special Agents and other federal, state, 
tribal, or local law enforcement officers who have been deputized under either Title IB or 21 of the United 
States Code and arc working on behalf of or at the direction of the FBI, e,g task force officer, JTTF, etc. 


Veraun Dated 
OctubcT IS, 20 II 
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1 9.2.4 (U) Joint Arrests 

t LI} All SSA may authorize a joint arrest with stale and local authorities, United Slates Marshal T s 
Service (US&1S), or other federal law enforcement agencies, In circumstances of joint arrests, the 
SAC remains responsible to ensure that there is a well-considered arrest plan. 

1 9. 2.5 (U) Possession and Displa y of Warrant 

(U) If time permits, the arresting Agent should have the arrest warrant in his/her possession and 
show it to the defendant at the time of arrest, If the Agent does not have the warrant with him/her 
at the time of arrest, the Agent must inform the defendant of the offenses) charged and that a 
warrant has been issued, The Agent musL at the defendant’s request, obtain the warrant and 
show it to the defendant as soon as practicable. 

193 {U) Arrest without Warrant 

1 93 . 1 (U) Federal Crimes 

(U) Whenever possible, SAC and USAO authority must be obtained before making a warrantless 
arrest. Agents are authorised to make warrantless arrests for any federal crime (felony or 
misdemeanor) committed in their presence. Agents also have authority to make warrantless 
felony arrests for a crime not committed in the presence of the Agent if there is probable cause to 
believe the person to be arrested committed a federal felony, A warrantless arrest must only be 
made when sound judgment indicates obtaining a warrant would unduly burden the investigation 
or substantially increase the potential for danger or escape. (See Non-Fcderal Crimes below) 

19.3.2 (U) Notifica tion to US. A ttorney 

(U> When a warrantless arrest has been made, the United States Attorney’s Office (USAO) must 
be contacted immediately For authorization to prosecute. 

1 9.3.3 (U) Non-Federal Crimes 

(U) There is no federal statutory authority for Agents to intervene in non- federal (slate) crimes. 
FBI policy permits certain types ofnon-federal arrests in exigent circumstances. 

(U) As a general rule, an Agent should only make an arrest for a state crime if a serious offense 
(felony or violent misdemeanor ) has been committed in his or her presence and immediate action 
by the Agent is necessary to prevent escape, serious bodily injury, or destruction of property. 

( U ) Agents are also authorized to arrest a person who is the subject of an FBI Predicated 
Investigation when a state or local arrest warrant for that person is outstanding, and the person is 
encountered during the investigation and would likely escape if not arrested. Similarly, an Agent 
working with state or local law enforcement officers who request assistance to apprehend a 
non federal fugitive who has been encountered during the course of a federal investigation is 
authorized to provide the requested assistance when intervention is otherwise permitted fora 
state crime a* described in the preceding paragraph. 
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(U) In some stales, there is legislative authority for an Agent to intervene in certain types of slate 
crimes as a peace officer rather than as a private citizen, Deputization as a state peace officer 
allows a federal AgetH to make arrests for slate offenses with the authority and immunities of a 
law enforcement officer of the stale or one of its subdivisions. Of greater significance is whether 
intervention by an Agent in a particular nontcdcra I crime falls within the scope of employment. 
Agents who intervene in serious non federal crimes committed in their presence or who arrest a 
state fugitive under the circumstance* previously described will normally he considered to be 
acting within the scope of their employment While the determination to provide legal 
representation depends on the Tacts and circumstances of each circumstance, the DOJ t as a 
general rule, will provide legal representation to Agents who act in accordance with this policy. 

(U) It is important to note that the DOJ has indicated that efforts to enforce minor infractions of 
the law, such as shoplifting or traffic Violations, are not generally considered to he within the 
scope of employment. Civil actions against federal personnel concerning acts which fall outside 
the scope of employment will not be removed to federal courts, and employees in such 
circumstances will not be eligible for legal representation provided for by the DOJ, An Agent's 
status with respect to civil liability in such circumstances will depend on a particular stale's law. 
which may require an employee to defend h i nisei Fhersel f as an ordinary citizen, 

(Lit See LHBSA Section 9 Ibra discussion of potential civil liability when making nonfcdcral 
arrests. 

1 9. 3 A (U) A dherence to FBf Policy 

(U) If any official in the US AO instructs an Agent to arrest or detain a subject in any manner 
contrary to FBI rules and regulations, the Agent must not comply w-ith such instructions and 
must immediately inform the SSA. {See the special rules in Section D. I } below for the arrest of 
juveniles.)' 

19.4 (U] Prompt Appearance before M agistrate 

(U) When a federal arrest is made, the arrestee must be taken before the nearest available federal 
magistrate judge without unnecessary delay. If a federal magistrate judge is not available, the 
arrestee may be brought before a state or local judicial officer authorized hy IS U.S.C. § 3041 
after consultation with the USAO. 

( U ) Special Considerations Ibr LIFAF Arrests : I f the arrestee was arrested on a warrant charging 
only a violation of UFAP. die arrestee can be transferred without unnecessary delay m the 
custody of the appropriate state or local authorities in the district of arrest. The USAO in the 
originating district will move promptly to dismiss the UKAP warrant. It is not necessary to wait 
until the UFA P warrant has been dismissed to release the subject to state or local authorities, but 
it is important for the Agent to ensure that I he USAO dismisses the UFAP warrant promptly after 
the arrest, 

{U> If an Agenl makes a warrantless arrest, a complaint must be filed setting forth the probable 
cause. The complaint is generally submitted when the arrestee is brought before the magistrate. 

A personal, telephonic, or electronic presentation to the magistrate of the facts setting forth the 
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probable cause must occur within 4K hours of a warrantless arrest if the arrestee Is detained and 
an initial appearance cannot he held within that 48 -hour period. 

1 9.4. 1 (U) Definition of Unnecessary Dela y 

(U) Rule 5 of the Federal Rules of Criminal Procedure requires the arresting agent to bring the 
accused before a federal magistrate judge w ithout unnecessary delay. What constitutes 
“unnecessary delay” is detenu ined in l ight of all the facts and circumstances. Confessions 
obtained front defendants during periods of unnecessary delay prior to initial appearance arc 
generally inadmissible at trial. A voluntary confession that occurs, within six (6)- hours of arrest is 
admissible if the delay of the initial appearance would be the sole reason for suppression. The six 
hour period begins when the accused is arrested or taken into custody by federal law- 
enforcement authorities on a federal charge and runs continuously. The six-hour safe harbor can 
be extended to include delay's (bund by the trial judge to be reasonable considering the means of 
transportation and the distance to be traveled to the nearest available magistrate judge, Delay for 
the purpose of conducting interrogation will not be excused. Delays for many other reasons are 
justified and not grounds for suppression, particularly when there is no indication that the 
purpose of the delay was to extract a confession. For example, courts have found delays beyond 
six hours to be justified when attributable to the defendant's need for medical treatment, his 
intoxication, the officers' need to remain at the scene, the unavailability of a magistrate, and 
booking or other legitimate police procedures unrelated to interrogation. 

fUi To avoid the risk that a court will determine that delay beyond the safe-hatbor period was 
"unnecessary” and suppress a confession elicited more than six 16) hours after arrest. Agents 
who want to continue or resume an interrogation after six (6) hours must seek a waiver of the 
right to prompt presentment from the accused. To continue an interrogation after six hours have 
elapsed. Agents must advise the suspect of his Rule 5 rights, and seek an affirmative waiver of 
those rights from him, The warning and wai ver must he substantially in accord with this 
approved waiver language: 

(U) "You hav e a right to be taken Without unnecessary delay to court, where a judge Will 
advise you o f the charges again* i you and provide you with a copy of any affidavit the 
government has filed in support of these charges. The judge will also advise you of the 
rights f advised you of previously, namely, that you have a right to an attorney and to 
have an attorney appointed for you: that you have a right to remain silent and that any 
statement ytm make may be used against you The judge will also tell you that you have a 
right to a preliminary hearing, at which the government will haw to establish that the 
charges in the complaint arc supported by probable cause, The judge wifi also tell you 
about the factors that will determine whether you can he released from custody? prior to 
trial. Da you understand this right and are you willing to waive it and continue to talk to 
IB ?' 1 

(U) It is prudent to obtain a waiver of the right to prompt presentment in any circumstance when 
Interrogation extends beyond the six-hour safe-harbor period, 

1 9.4. 2 (U) Effect of Unnecessary Dela y 

(LI) Incriminating statements obtained during any period of unnecessary delay after arrest and 
prior lo the initial appearance before a magistrate are subjeet to suppression. 
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1 9 A3 (U) Necessary Dela y 

(U) If the delay in bringing an arrested person before the magistrate judge is greater than six 
hours and a confession is obtained after six hoit/y, the government has the burden of proving the 
delay was reasonable. Factors which could contribute to a reasonable delay are the means of 
transportation, the distance to the nearest available magistrate judge and the time and day of the 
week of the anest, 

19 A A (U) Initia l Processing 

(U) Following an arrest* the defendant should be brought to the nearest FBI office for 
fingerprinting, photographing* and an interview, where appropriate. Other law enforcement 
offices may be used for this purpose if FBI facilities are not reasonably available. This process 
generally should not exceed six hours, measured from the time of arrest to the time of arrival 
before the magistrate judge. 

1 9* A 5 (U) Collection of DNA a fter A hhest or Detention 

{U) The Attorney General has directed the FBI to collect DNA samples from all arrestees, other 
than juveniles, and all non-U.S. persons fnon-USPLR) lawfully detained. A DNA sample should 
ordinarily be obtained during initial processing. FBI DNA collection kits should be used to 
collect a saliva sample from inside the person's mouth. 

(U) There is no requirement to obtain a DNA sample from an individual who is arrested on an 
UFAF warrant when that individual wi IE be turned over to the appropriate slaLc/locaJ agency w id 
the expectation that the LT'AP charge will be dismissed. A DNA sample should not be obtained 
from an individual arrested on a UFAP warrant when there is no expectation of federal 
prosecution. For example, when it is anticipated that the UFA? charge will be dismissed and the 
individual turned over to the appropriate statc/loeal agency, no DNA sample should be obtained. 

(U) A DNA sample may not be taken from a juvenile arrestee. A DNA sample may only be 
taken from a juvenile after he/shc has been convicted of certain drug or violent offenses, 

{II) Federal law requires covered individuals to provide a DNA sample as a condition of pre-trial 
release and imposes criminal liability for failing to cooperate in the collection of the sample 

(U) The law also authorises "such means as are rcasemably necessary to detain, restrain, and 
collect a DNA sample from an individual who refuses to cooperate in the collection of the 
sample." If resistance is encountered* agents must seek to elicit the cooperation of the individual 
lo collect the sample, If the individual continues to resist* agents must advise the US AO or the 
judge and seek a judicial order requiring the individual to cooperate. If (he individual still 
continues to resist after the court order, agents may use reasonable force to overcome resistance 
and safely obtain the DNA sample. 

{L r ) For additional information on the process of collecting DNA samples from arrestees, see EC 
dated. 1 1/20/2009 from Laboratory to All Field Offices 1 3 1 9T- H O- A 1 4K 7667- LA B >. 


Venritin Dated. 
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19.5 fU) Use Of Force 

1 9 . 5. 1 (U) IDENTIFICA TIQN 

(U) An arresting Agent should identity bimselftlierself before effecting the arrest, in a dear, 
audible voice, as a Special Agent of the FSI and state his/her intention ro arrest the subject. 

1 9. 5.2 fU) Physical Force 

(U) Agents are permitted to use the amount of physical force reasonable and necessary to take 
custody and overcome all resistance of the arrestee, and to ensure the safety of the arresting 
Agents, the arrestee and others in the vicinity of the arrest. 

(U) See FBI Deadly Force Policy - DIOG Appendix F 

19 S3 (U) Restraining Devices 

(U ) Temporary restraining devices, such as handcuffs, shackles and/or belts may be used to 
secure an arrestee. Use of such devices is lawful and proper, and Agents are expected to employ 
reasonable judgment under the circumstances in the use of these devices and to resolve any 
doubt in favor of their use, 

1 9.5.4 (U) Pregnant Arrestees 

(U) Within the standard operational procedures designed to ensure the successful completion of 
an operation and its immediate objectives, and while also guarding the safety of all involved, 
reasonable precautions and techniques should be employed when dealing with an arrestee 
reasonably believed to be pregnant to avoid harm to the fetus. This caution includes actions 
involving confrontation, apprehension, employing restraints, transporting and confining the 
individual, and respond promptly to needed or requested medical care. In particular, reasonable 
care or precautions should be considered and used, if appropriate under the circumstances, when 
employing physical restraints that directly constrict the area of the fetus. 

19.6 (U) Manner qf Entry 

1 9.6 .1 (U) Knock a nd Announce 

C U) Agents are required by law to "knock and announce" their identity, authority and purpose, 
and demand to enter before entry is made to execute a arrest warrant. This is part of the 
"reasonableness" requirement of the Fourth Amendment. The announcement can be given by one 
Agent and need not be lengthy or elaborate hut must convey to the person behind the door whqt 
is occurring. A loud announcement is essential and electronic devices designed to amplify the 
voice should be used where communication is anticipated to be difficult. The "knock and 
announce 11 requirement need not be complied with when the Agent executing the warrant has a 
reasonable suspicion of one or more of the following: 

A){U} to "knock and announce" would cause the Agent and/or another to be placed in imminent 
peril of bodily harm;. 
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B) (U) to 11 knock and announce 11 would be a useless or futile gesture as the persons within die 
premises already know of the Agent’s identity, authority h and purpose; 
c.\ {&XW would cause the evidence sau^hi under the warrant to be 

dettroyed or removed; or 

-tomsks^ ssKaa^ft ijesycmt'fefi, m^- 

19.6,2 (U) Suspect’s Premises 

(U) In order to lawfully enter a suspect's premises to effect an arrest, Agents must have either (i) 
consent to enter, (ii) an emergency Choi pursuit 1 ') justifying a warrantless entry, or (iii) an arrest 
warrant and probable cause to believe the suspect is in the premises. In determining whether a 
location iathe suspect's premises, an apartment, hotel, motel or boardinghouse room becomes the 
principal residence of the person renting or leasing such premises. If the suspect is not named on 
the lease oriental agreement, the premises may still be considered the suspect's premises if the 
suspect occupies the premises jointly with another. 

1 9. 6.3 (U) Third Party Premises 

(U) In order to lawfully enter a third party's premises to arrest a suspect. Agents must have 
cither; (i) consent to enter, (ii) an emergency ("hot pursuit") justifying a warrantless entry, or {iii) 
a search warrant for the third party premises describing the person to be arrested, For these 
purposes, a “third party premises" is any private premise which is not the principal residence of 
(he person to be arrested, For example, a search warrant would be necessary if the arrestee is an 
overnight guest, casual visitor, or temporary caller at the premises of the third party. In order to 
make an entry to arrest, whether premised on an arrest warrant, search warrant, or exigent 
circumstances, the Agent must have probable cause to believe the suspect to be arrested is within 
the premises being entered. 

19.6.4 (u) Exigent Circumstances 

C U) If an Agent has a reasonable bel ief that the subject will flee before a warrant car be obtained, 
or there is a substantial likelihood that the subject will dispose of evidence before a warrant can 
be obtained or there is increased danger to Agents or others if entry ls delayed to obtain a 
warrant, exigent circumstances exist which may justify entry into premises to make a warrantless 
arrest or entry into third party premises without a search warrant to make an arrest. 

19.7 (U) Search Incident to Arrest 

(U) The authority to search incident to an arrest is an exception to the warrant requirement. 

Under this exception, an Agent may conduct a full and complete search of the person of the 
arrestee and the area within the arrestee's “ imm ediate control.” Immediate control means "the 
area from within which he might gain possession of a weapon or destructible evidence,” Gncc an 
arrestee has been secured and can no longer reach into the area to be searched, there is no longer 
justification for a warrantless search. The purpose for the exception is to protect the arresting 
Agent, prevent escape, and preserve any evidence in possession of the arrestee. The right to 
search flows from the fact of arrest, not the nature of the crime for which the arrest has been 
made. 


Version Bated; 
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19.7.1 (U) Prerequisite: La wful A rrest 

( U) For a search incident to arrest to be lawful, the arrest itself must be lawful, i.e. probable 
cause must exist. Agents can maximize the likelihood that an arrest and search will survive a 
motion to suppress by obtaining an arrest warrant before effecting the arrest. As discussed below, 
entry into a subject's premises to arrest may also affect the validity of a search incident to arrest, 

(L 1 ) Entry into Suspect's Premises: Any entry into premises in order to affect an arrest must be 
lawful. If entering the defendant's premises to effect the arrest. Agents must have either (i) 
consent to enter, (ii) an emergency ("hot pursuit"), or (iii)an arrest warrant and probable cause to 
believe that the defendant is inside the premises. 

1 9. 7.2 (U) Scope and Timing Requirement 

19.7.2.1 (U) Scope of Search 

(U) The Agent is entitled to search the person of the arrestee and the area within the arrestee's 
immediate control at the time of arrest for weapons, to prevent concealment or destruction of 
evidence, and to prevent concealment of any means of escape. The search may include any 
portable persona] property in the arrestee's actual possession, such as clothing, purses, 
briefcases, grocery bags, etc. Items of personal property that are accessible to the arrestee, 
such as an unlocked desk drawer or unlocked suitcase, may be searched. Absent an 
emergency, in accessible or locked items of personal property may not be searched. If there is 
probable cause to believe such items contain evidence, they may be seized, but the Agent 
must obtain a search warrant prior to opening the item. Once an arrestee has been secured and 
can no longer reach into the area to be searched, there is no longer justification for a 
warrantless search 

19.7.2.1.1 (V) Vehicles 

(U) The interior passenger compartment of a vehicle may be searched incident to a recent 
occupant’s arrest only if the arrestee is within reaching distance of the passenger compartment 
at the lime of search or if it is reasonable to believe the vehicle contains evidence of the 
offense for which the person was arrested , Absent one of these factors, a warrantless search of 
an arrestee's vehicle is unlawful. For example, a search of the vehicle incident to an arrest 
would not be permitted after the occupant has been removed, handcuffed, and placed in a 
nearby Bureau vehicle if the arrest was based on an outstanding arrest warrant for failure to 
appear. If n search of a vehicle incident lo arrest can be done under these factors, the 
permissible scope can include unlocked or otherwise accessible containers* such as glove 
compartments; luggage, bags, clothing, etc. 

1 9. 7.2. 1.2 ( U) Protective Sweep 

(U) Agents may conduct a protective sweep of the areas immediately adjacent to the site of 
the arrest for the purpose of locating persons that may pose a threat to the safety of the Agents 
or others. Additionally, a protective sweep of other areas beyond those immediately adjacent 
to the site of the arrest may be conducted if the Agents have a reasonable suspicion, based on 
specific and articulable facts, that an individual who poses a danger lo those present is in the 
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area to be swept. Reasonable suspicion must be based on facts known to the Agents, such as 
noises in an attic or the at-large status of a dangerous associate. A protective sweep must be 
limited to a brief inspection of those areas within the premises in which a person could hide. 

Ef an Agent observes evidence in plain view while conducting a protective sweep, the 
evidence may be seized under the plain view doctrine. 

19-7,2.2 (U) Timine; 

fU) A search incident to arrest must be made contemporaneous to the time and place of arrest 
and before the arrestee is removed from the area. A further more thorough search of the 
arrestee at the ELI office or some other place to which the arrestee is transported is also 
permitted as a search incident to arrest. Additionally, Agents may make protective sweeps as 
described above at the lime of arrest. 

1 9. 7.3 (U) Investor y of Personal Property 

CU) Items of personal property removed from a person who has been arrested and is to be 
incarcerated should be carded! y inventoried and promptly, thoroughly searched by Agents prior 
to being stored for safekeeping. The inventory must include the contents of containers such as 
purses, shoulder bags, suitcases, etc, 

(U) If Agents have probable cause to believe evidence or contraband is in a locked container, a 
search warrant must be obtained absent emergency circumstances. This is the case because such 
a search is investigatory in nature, Et also falls outside what is permitted as a search incident to 
a nest because the contents of a locked container are not immediately accessible to the arrestee. 

(U) Agents do not need a warrant to conduct an inventory search of a lawfully seized container 
removed from an arresters person. Agents may not. however, conduct an inventory search 
solely for investigative purposes. The inventory search must strictly adhere to standardized 
criteria and procedures for collection of property. 

19.8 ( U] M ed ical Attention for Arrest ees 

(Ul IF a person in FBI custody complains of sickness or ill health or if it is reasonably apparent to 
Agents that such a condition exists, arrangements should be made to afford such persons medical 
attention without delay. Agents must also be mindful of the health and well-being of any 
pregnant subject and make arrangements for medical attention when asked or when it is 
reasonably apparent that the subject or fetus needs medical attention. If the time required to 
obtain medical care may result in the passing of more than six hours between arrest and 
presentment. Agents must document the basis for and the receipt of any medical attention given 
to the arrestee, 

19.9 (U) Arrest of Foreion Nationals 

19.9.1 (U) Requiremen ts Per taming to Foreign Na tiona ls 

A) (U) When a foreign national is arrested or detained, the arresting agent must advise him/her of 
the right to have his/her consular officials notified. 
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B) (U) In some situaiions, the nearest consular officials musi be noli fed of the arrest or detention 
of a foreign national.. regardless of (he national's wishes. 

C) (U) Consular officials are entitled to access io their nationals in detention and: are entitled to 
provide consular assistance. 

1 9, 9.2 (U ) Steps to Follo w When a Foreign Na tional is A u rested or 

Detained 

(U l The arresting agent must determine the foreign national's country of citizenship in the 
absence of other information, the arresting agent must assume that the country of citizenship is 
the country on whose passport or other travel documents the foreign national travels. 

(L’J If the foreign national's country' is not on the mandatory notification list below: 

A){U) The arresting agent must promptly offer to notify the foreign national’s consular officials 
of the arrest/detention, fora suggested statement to the foreign national, see Statement I 
below. 

B} (L") If the foreign national asks that consular notification be given, the arresting Agent must 
promptly notify the nearest appropriate consular official of the foreign national's arrest. 

(U) If the foreign national's country is on the list of mandatory notification countries: 

A) (UjThc arresting agent must promptly notify the nearest appropriate consular official of the 

antst/deieniiofi. 

B> (U) The arresting agent must tell the foreign national that this notification will be made. A 
suggested siaiemem to the foreign national is found at Statement 2 below. 

(U) The arresting agent must keep a written record (EC or FD-302) in the investigative file that 
hti'she provided appropriate notification to the arrestee and of the actions taken. 

Mandatory Notification Countries and Jurisdictions 

Algeria Guyana Saint Lucia 


Anti gua a i id Barbuda Hong Kong 30 

Armenia Hungary 

Azerbaijan Jamaica 


Saint Vincent and the 
Grenadines 

Seychelles 

Sierra Leone 


“ (U) Hong Kong reverted to Chinese sovereignty on July V, 19S7, and is flow officially referred to as the I long 
Kong Special Administrative Region. Under paragraph 3(f) { 2 ) of the March 25, 1 L J97, LfS-China Agreement 
on the Maintenance of the U.5. Consulate General In the Hong Kong Special Administrative Region, U.5. 
officials are required to notify Chinese officials of the arrest or detention of persons, bearing Hong Kong 
passports in the same manner as is required for parsons bearing Chinese passports- i.e.. Immediately and, in 
any event, within four days of the arrest or detention. 
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Mandatory Nod fi cation Countries and Jurisdictions 


Bahamas 

Kazakhstan 

Singapore 

Barbados 

Kiribati 

Slovakia 

Belarus 

Kuwait 

Tajikistan 

Belize 

Kyrgyzstan 

Tanzania 

Brunei 

Malaysia 

Tonga 

Bulgaria 

Malta 

Trinidad and Tobago 

China i[ 

Mauritius 

Tunisia 

Costa Rica 

Moldova 

Turkmenistan 

Cyprus 

Mongolia 

Tuvalu 

Czech Republic 

Nigeria 

Ukraine 

Dominica 

Philippines 

United Kingdom w 

Fiji 

Poland [noivpermantmt residents 
only) 

U.S.S.JL 

Gambia 

Romania 

Uzbekistan 

Georgia 

Russia 

Zambia 

Ghana 

Saint Kitts and Nevis 

Zimbabwe 


Grenada 


13 (U) Notification Is not mandatory In Lhu case of persons wlm carry "Republic of China" passports issued by 
Taiwan. Such persons must be informed without delay, that the nearest office of the Taipei Economic and 
Cultural Representative Office (TfcCBQ"]. the unofficial entity representing Taiwan's interests in the United 
States, can be notified At their request, 

” I'U] Mandatory notiflcatk n is required for nationals of the British dependencies Annual la, Briush Virgin 
Islands, Bermuda. Montserrat, and the Turks and Caicos Islands, Their nationals carry United Kingdom 
passports. 
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1 9, 93 (V) Suggested Sta tements to A n rested or Detained Foreign 

Nationals 

19.9.3.1 (U) Statement 1: When Consular Notification is at the Foreign National's 
Option 

(U> You are entitled to have us notify your country 1 & consular representatives here in the 
United States that you have been arrested or detained. A consular official from your country 
may be able to help you obtain legal counsel and may contact your family and visit you in 
detention, among other things. II’ you want us to notify your country's consular officials, you 
ean request notification now or at any time in the future. After your consular officials am 
notified, they may call or visit you. Do you want us to notify your country's consular 
officials? 

19.9.3.Z (U) Statement 2 : When Consular Notification is Mandatory 

fUji Because of your nationality, we are required to notify your country's consular 
representatives here in the United States that you have been arrested or detained. After your 
consular officials are notified, they may call or visit you. You are not required to accept their 
assistance, hut they may be able to help you obtain legal counsel and may contact your family 
and visit you in detention, among other things. We will notify your country's consular 
officials as soon as possible, 

19,9,4 (U) Diploma tic Immuni ty 

(U) Diplomatic representatives of foreign governments in the United Slates may not be arrested. 
Agents may nol enter the office or dwelling ofa diplomat ora person with diplomatic immunity 
for the purpose of making an arrest, search, or seizure. 

19.9.4.1 (U> Territorial Immunity 

fU) All embassies, legations, and consulates have territorial immunity. Consequently, no 
Agent may attempt to enter any embassy, legation, or consulate for the purpose of making an 
arrest, search or seizure, This territorial immunity extends to both the offices and residences 
of ambassadors and ministers, but only to the office ofa consul. A consuFs residence does not 
enjoy territorial immunity. 

19.9.4.2 (U) Personal Immunity 

(U) Ambassadors and ministers, members of their staffs and domestic servants, and the 
immediate family members of a diplomatic officer have personal immunity, as do the 
immediate family members of the administrative and technical staff of a diplomatic mission. 
Consequently, no Agent should attempt to arrest or detain any such person. The personal 
immunity applies to the staffs, domestic servants and immediate family members, regardless 
of citizenship, Ordinarily, consuls do not have personal immunity from arcest on 
misdemeanor charges. If the arrest of a consul is contemplated, immediately notify FBI HQ by 
telephone or electronic communication before any action is taken so that an appropriate cheek 


1943 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
§ J 9 Domestic I n vestigat tons an d Operations Guide 

can he made with the Department of State to determine whether the consul involved has any 
special immunity. 

19.10 [U) Arrest of News Media Members 

(U) Attorney General approval must be obtained prior to seeking an arrest warrant for or 
arresting a member of the news media who is suspected of eom mitring any federal offense in the 
course of, or arising out of T the coverage or investigation of a news Story, or while engaged irt the 
performance of official news media duties. 

(U) Requests for the approval must he submitted to the AD of the operational FBIHQ division 
that is responsible lor the investigative classification and the AD of the Office or Public Affairs 
(OP A) by an EC. The requesting F.C must be reviewed by the CIX’ and approved by the SAC 
after coordination with the local USAO. "The EC must set forth the fads believed to establish 
probable cause and the investigative justification for the arrest, consistent with the DOJ 
guidelines set forth in 28 C-F.R. § 50.10. 

(U) In emergency circumstances, an Agent may arrest a member of the news media without prior 
AG approval, if authorized by the SAC and the USAO, In such situations, the SAC must 
immediately notify the AD of the FBIHQ operational division, the AD of the OPA, and the 
General Counsel of the arrest, the emergency circumstances that justified proceeding without 
prior authorization and all of the information that would have been provided if prior 
authorization bad been sought The AD of the operational division must promptly notify the 
appropriate officials at DOJ as established in 28 C.F. R § 5tL 10, After these oral notifications 
have been made, the Held office must provide written documentation to the FBIHQ operational 
AD as soon as practicable, but nut more than 24 hours after the arrest. FBIHQ must provide 
appropriate written documentation to the DOJ approval authorities to whom oral notice was 
given. 

19.11 fU] Arrest of Arm ed Forces Personnel 

(U) The Uniform Code of Military Justice authorizes any commanding officer exercising general 
court-martial jurisdiction to surrender military personnel under the officer's command to civil 
authority when the person has been charged with a civil offense. A request for surrender must be 
accompanied by: 

A HU ) A copy of the indictment, presentment, information, or warrant; 

B} (IT) Sufficient information to identity the person sought as the person who allegedly 
committed the offense: and 

C) (U1 A statement or the maximum sentence which may be imposed upon conviction. 

(Lf) Receipts for persons surrendered for civil prosecution should be signed by an official in the 
U5 AQ t not by an FBI employee, 
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19.12 (U) Arrest of Juveniles 

1 9.12.1 (U) Definition 

(U) A violation of IS U.S.C. 5 922{x)(2) or violation a federal law which would have been a 
crime, if committed by an adult, by a person who has not attained his/her I 8th birthday is an act 
of juvenile delinquency. For the purpose of juvenile delinquency proceedings, a juvenile is a 
person who committed a crime before his/her 18^' birthday who has not attained his/her 11^ 
birthday at the time charges arc commeneed. 

1 9. 1 2.2 (U) A rrest Procedures 

(U) Prearrest procedures applicable to adults (discussion with US AO, filing of complaint, 
issuance of warrant! also govern arrests of juveniles. After arrest, however, the Federal Juvenile 
Delinquency Act requires strict compliance with the following procedures: 

A) (U) Advice flf Right* - The arrest in u Agent must immediately advise the arrested juvenile of 
his/her “legal rights" in language comprehensible to the juvenile. The rights found on the 
standard Form FD-395 meet this requirement. The arresting Agent may obtain a signature 
waiving his/her rights only if the Chief Division Counsel (CDCj or the US AO. based on the 
taw of the circuit, has approved interrogation of the juvenile. 

0) (U) Notification io U.S, Attorney’s Office and Juvenile's Parents - The arresting Agent 
must immediately notify the US AO and the juvenile's parents, guardian, or custodian, that the 
juvenile has been arrested, Thu juvenile's parents, guardian, or custodian must also be nobbed 
of the juvenile’s rights (use the FD-395 for this purpose) and the nature of the alleged offense 
for which the juvenile was arrested. 

C) (LT) Initial Appearance before Magistrate Judge - Subsequent to his/her arrest, the juvenile 
must be taken to a magistrate judge forthwith. 

0) (U) Record of Notification and Appearance - Because proof of timely notification to the 
juvenile's parents and prompt appearance before the magistrate judge is essential. Agents must 
promptly prepare FD-302(s) documenting the time the following events occurred: 

1) (Li The juveni I e was arrested; 

2) (U) The juvenile was advised of his/her rights; 

3) (L) The US AO was notified; 

4) (U) The juvenile’s, parents, guardian, or custodian were notified o! (he arrest and of the 
juvenile’s rights; and 

5-3 ( U) The juvenile was taken before a magistrate judge. 

E) (U) Interrogation and Interviews - Whether a juvenile may he interrogated between arrest 
fora federal ollenscand initial appearance before the magistrate judge depends on the law of 
the circuit hi which the arrest occurs, [f interrogation is not permitted in the circuit of arrest, 
information volunteered by the arrested juvenile concerning hi s/hcr guilt must be recorded in 
the Agent's KD-JiH. Clarifying questions may be asked if necessary to be certain what the 
juvenile intended to Convey The volunteered statement may be reduced to writing if such 
action docs not delay the juvenile's appearance before the magistrate judge. A juvenile may 
always be questioned concerning the guilt of someone else, if such questioning does not delay 
bringing him/her before the magistrate judge. These rales apply only when the juvenile has 
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been arTtsted for a federal off case, They do not apply when the juvenile is suspected of having 
committed a federal offense but is under arrest by state or local officers on a state or local 
charge. 

F) (U) Fingerprinting and PKn mg rap King - Agents may not fingerprint or photograph a 
juvenile unless h&'she is to be prosecuted as an adult. Heeause it is not known at the lime of 
arrest whether the juvenile will be prosecuted as an adult or a juvenile. Agents may not 
fingerprint or photograph a juvenile without permission of the magistrate judge. Following an 
adjudication of delinquency based cm an offense which, if committed by an adult, would be a 
felony that is a crime of violence or a violation of 21 U.5.C. '§ 841 (manufacturing, 
distributing, dispensing of a controlled substance or possession with the intent to do same), $j 
95S (possession of controlled substances on board vessels arriving in or departing the United 
Slates) or tj 959 (manufacture or distribution of controlled substances For purpose of unlawful 
importation), the juvenile must be fingerprinted and photographed. Agents should coordinate 
fingerprinting and photographing with the (JSMS, 

G| (U) DN.V Collection - Agents must not take DMA samples from juveniles at the time of arrest. 

H) (U) Tress Keltic* - Neither the name nor picture of ait arrested juvenile may be made public. 
Accordingly, the arrest of a juvenile may only be announced by a press release that does not 
contain identifying information. 
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20 (U} OTHER INVESTIGATIVE RESOURCES 

20.1 (U) Overview 

(!.') Other investigative resources described below arc available as specified in Assessments and 
Predicated Investigations. The investigative resources include: 

20.1.1 (U//FOUO) Name Trace Requests (CIA and NSA ) 

CL 1 ) See Section 2U.2 below. 

20.1.2 ( U//FOUO } Bund Fa ith Program 

(U) See Section 203 below. 

20.13 (U//FOUO) Behavioral Analysis - Opera tional Behavioral Support 
Program 

CU) Set Section 20.4 below. 

20.1.4 (U//FO U 0) Sfnsiti ve Tfcjinica l Equipment 

(U) See Section 20,5 below-. 

20.2 (U//FOUO) Name Trace Requests (OA and NSA) 

(U FOUO) A Name Trace Request is a formal request to another government agency to conduct 
a search of its existing records for information regarding a subject of interest, 

203.1 (U) A UTHORIZED In vestiga ti ve A ctivity 

(U/7FOUO) CIA and NSA Name Trace Requests may be used in Assessments and Predicated 
Investigations. 

(U) See the classified provisions, in DIOCi Appendix Ci for additional information on making a 
Name Trace Request. 

203 (U//FOUG) Blind Faith Program 

fU/VFOUO)Thc Blind Faith Program is an analytical program which provides a technical 
countermeasures profile tor targets of investigative interest to the FB I, These profiles assess the 
technical sophistication of the intelligence service of a particular target in order to determine its 
capability to detect and/or nullify technical attacks directed against it. Awareness of a target's 
Capabilities prior to a technical installation penniLs the selection of technologies appropriate to 
tile level of sophistication of that target, thereby conserving resources. The program reports the 
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results of its analysis in the form of a Blind Faith report, which details and describes the 
technical sophistication of the target. 

20.3. 1 (U) Ail THORIZED ImVESTIGA T!VE a CTi ViTY 

(LV/FGUG) The Blind Faith Program may be used in Assessments and Predicated Investigations. 

(L'mFOUQ) The Blind Faith Program is operated by the Operational Technology Division, 
Technical Operations Coordination Unit, Technical Evaluation Office (TED). 

Z0.4 (U//FGUO) Operational B ekavi oral Support Program -CIRG's 

Behavioral Analysis Units (BAUs) and/or CD's Behavioral Analysis 
Program 

20 A A { U) A UTHQRIZED tttVESTSGA TiVE A CTiViTY 

( U) The National Center for the Analysis of Violent Crime (NCAVC) manages and directs the 
FBI's operational behavioral support across ail investigative programs, [n addition, the 
NCAVCs units provide operational and analytical support, without charge, to federal, state. 
locaL tribal, foreign law enforcement, intelligence and security agencies involved in the 
investigation of unusual or repetitive violent crimes, communicated threats, terrorism, and other 
matters. The NCAVC also provides support through expertise and consultation in non-violent 
matters, such as national security, corruption, and white-collar crime investigations. See DIOG 
Section 12 for 10-9^ documentation and other requirements tor Assistance to Other Agencies. 

(U) Requests lor NCAVC operational assistance should be made to the NCAVC Coordinator in 
the field office or to the NCAVC’ unit at Quant ieo. Requests for sendee can be coordinated 
through direct contact, telephone, email or Electronic Communication to the NCAVC. All FBI 
operational behavioral support requests must be coordinated and approved by the NCAVC. 

(U) The appropriate Legal Attache office (Legal) or the International Operations Division £lODt 
must coordinate all requests from foreign law enforcement, intelligence and security agencies 
with NCAVC staff. NCAVC staff will assist the Legal or 10 D preparation of an appropriate 
request for service and w ill facilitate the delivery of the service requested from the foreign 
agency, 

i LI ) For additional information regarding the services provided by NCAVC - 

20.5 (U//F0U0) Sensitive Technical Equipment 

(1J//FQUO) Definition : Sensitive Technical Equipment (STE) is defined in the classified 
provisions in DIOG Appendix G, 

20.5.1 (U) A UTHORIZED INVESTIGA Tl IE ACTI ViTY 

( U ) The use of STE for elect ronie or physical surveillance may be authorised in Predicated 
Investigations as set forth in OTP policy . See the classified provisions in DIOG Appendix G for 
additional informal ion, 
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(LV FGUG) All use of STE outside the United Stales requires the prior approval of the HQ 
operational division responsible for the investigation, ihe IOD, and the Operational Technology 
Division (OTD). Refer to the Extraterritorial Guidelines (see D30G Section 1 3), appropriate 
Policy implementation Guides, and OTD policy for additional information. 
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21 (U) INTELLIGENCE COLLECTION 


21.1 (U) Incidental Collection 

(U//FOUO) Intelligence that is responsive to PFI requirements,. FBI national collection 
requirements, and FBI field office collection requirements may be collected incidental to- an 
Assessment or Predicated Investigation. When information that is responsive to these 
requirements is incidentally collected in an Assessment or Predicated Investigation, it should be 
forwarded to the Field Intelligence Group (FKI) for evaluation and potential dissemination 
against collection requirements. (See DIOG Section 1 5.6.1 .2 ■ Written Intelligence Products) All 
incidental collection must be documented in the 8 151 field office file. 

(U//FOUO) Prior to submitting to the FIG any information that may be evidentiary and therefore 
paten dally discoverable, the FBI employee should discuss with the CDC or QGC the potential 
impact disseminating the information in an intelligence product may have on the prosecution of 
the investigation. To the extent dissemination might or is likely to have an adverse impact on the 
prosecution, the FBL in consultation with the prosecuting attorney, must assess whether the need 
for dissemination outweighs the probable impact the dissemination may have on the prosecution, 

21.2 (U) FBI National Collection Requirements 

l U FOUO) The FBIHQ DI establishes FBI national colleelion requirements after coordination 
with OGC, other FBIHQ operational divisions, and field offices. An FBI national collection 
requirement describes information needed by the FBI to: (i) identify or obtain information about 
potential targets ofi or vulnerabilities to T Federal criminal activities or threats to the national 
security; or HO inform or facilitate intelligence analysis and planning pertinent to the FRT’s law 
enforcement or national security missions. 

(U//FOUO) FBI intelligence needs may correspond with "Foreign Intelligence Requirements 4 * 
issued under the authority of the DNL An FBI national collection requirement should not be 
confused with a PFI requirement. A PFI requirement addresses the capabilities, intentions, or 
activities of foreign governments or elements ihcreof. foreign organizations, or foreign persons 
that are not directly related to the FBTs core national security and law' enforcement missions. 

{ U ) For example : 

A) (U//FOUG) The USIC seeks information on the presence of Tamil Tigers inside the United 
States. FBIHQ DI accepts this requirement because it corresponds to the national .security 
mission of the FBI and a National Collection Requirement is published to the full FBI. The 
field office could open a Type 3 Assessment in tire appropriate national security classification 
to determine the existence and extent of the threat posed to the United States by the Tamil 
Tigers in its AOK. Any information collected during this Type 3 Assessment cun be used to 
answer this National Collection Requirement and be disseminated appropriately to the USIC, 

B] (U//FOUO) The USIC seeks information regarding the inicnlions of the Republic nf X to 
strengthen its military in the wake of hostile actions by the Government of Y. [f FBIHQ DI 
accepts litis requirement as a PFI requirement. a file in the 809-814. or 8 16 investigative 
classification series will be opened by the DI, A field office could open a Type 6 Assessment 
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to determine if it has the capacity to respond to this requirement in the 809-fc 14, or 8 1 6 senes 
file. 

C) (U VFOUO) Tht US1C seeks information regarding the Government of Y’s intentions vis-i-vis 
the Republic of X. FBlffQ PI accepts this requirement as a PFI Collection Requirement and 
opens a file in the 809-814, or 8 1 ft investigative classification series. As part of an existing 
counterintelligence Predicated Investigation, an investigative squad has technical coverage 
that is yielding information pertinent to this PFI Collection requirement. The investigative 
squad should share all of the foreign intelligence collected during the course of its 
investigation with the FIG. which will analyse and disseminate that foreign intelligence 
information and document its handling of the intelligence in the appropriate 809-814. or HE6 
classification file. 

(U/i'FOUO) Before any investigative activity is conducted in order to respond to an FBI national 
collection requirement, an Assessment or Predicated Investigation must be opened or already 
open. An Assessment cannot be opened solely based upon an FBI national collection 
requirement. An authorised purpose inational security or criminal threat) and clearly defined 
objectives) must exist prior to opening an Assessment. During an Assessment, the FBI is 
authorized to collect against any FBI national collection requirement that is relevant to the 
Assessment, The FBI is authorized to open an Assessment (or a Full Investigation)' to collect on 
a USIC intelligence requirement only if it has been accepted and designated by FBI HQ Dl as a 
PFI Collection Requirement, as specified in DJOG Section 9. 

(U//FOUO) To ensure continuity in the dissemination of reporting against collection 
requirements, FBI HQ Dl provides a unique requirement citation number for each FBI national 
collect Ion and PFI requirement. The FBIH Q Dl will determine the method for capturing and 
tracking these referenced unique identifiers. 

(U//FOUQ) FBIHQ PI provides specific guidance in its policy implementation guide regarding 
FBI national collection requirements, FBI field office collection requirements {see Section 21.3, 
below) and PFI requirements. 

21.3 (U//FOUQ) FBI Field Office Collection Requirements 

(U//FOUO) An FBI field office collection requirement describes information needed by the field 
to: (i) identify or obtain information about potential targets of or vulnerabilities to Federal 
criminal activities or threats to the national security; or (ii) inform or facilitate intelligence 
analysis and planning pertinent lo the FBI's law enforcement or national security missions. 

(U//FOLO) Before any investigative activity may be conducted to respond to an FBI field office 
collection requirement, an Assessment or Predicated Invest igation must be opened or already 
open. An Assessment cannot be opened solely based upon an FBI field office collection 
requirement. Following coordination with the CDC T FBI field office collection requirements are 
established by the Intelligence Program Coordinator {SKA or SIA), consistent with FBI National 
Priorities as established by FBIHQ. FB! field office collection requirements may only be levied 
against the field office creating the requirement. All FBI field office collection requirements 
must receive a unique requirement citation in accordance with the classified FBI Corporate 
Requirements Policy . The IPG contains detailed guidance regarding the field office collection 
requirements. 
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PREAMBLE 

These Guidelines are issued under the authority of the Attorney General as provided in 
sections 509, 510, 535, and 534 of title 28, United States Code, and Executive Order 12333, 
They apply to domestic investigative activities of the Federal Bureau of Investigation (FBI) and 
other activities as provided herein. 
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INTRODUCTION 

As the primary investigative agency of the federal govermnem* the Federal Bureau of 
Investigation (FBI) has the authority and responsibility to investigate all violations of federal law 
that are not exclusively assigned to another federal agency. The FBT is farther vested by law and 
by Presidential directives with the primary role in carrying out investigations within the United 
Stales of threats to the national security. This includes the lead domestic role in investigating 
international terrorist threats to the United States, and in conducting counterintelligence activities 
to meet foreign entities 7 espionage and intelligence efforts directed against the United States. 

The FBI is also vested with important functions in collecting Foreign intelligence as a member 
agency of the U.S. Intelligence Community. The FBI accordingly plays crucial roles in the 
enforcement of federal law and the proper administration of justice in the United States, in the 
protection of the national security, and in obtaining information needed by the United States for 
the conduct of its foreign affairs. These roles reflect the wide range of the FBI’s current 
responsibilities and obligations, which require the FBI to be both an agency that effectively 
detects;, investigates, and prevents crimes, and an agency that effectively protects the national 
security and collects intelligence. 

The general objective of these Guidelines is the full utilization of all authorities and 
investigative methods* consistent with the Constitution and laws of the United States* to protect 
the United States and its people from terrorism and other threats to the national security* to 
protect the United States and its people from victimization hy all crimes in violation of federal 
law, and to further the foreign intelligence objectives of the United States. At the same time, it is 
axiomatic that the FBI must conduct its investigations and other activities in a lawful and 
reasonable manner that respects liberty and privacy and avoids unnecessary intrusions into the 
lives of law-abiding people. The purpose of these Guidelines, therefore, is to establish consistent 
policy in such matters. They will enable the FBI to perform its duties with effectiveness, 
certainty, and confidence, and will provide the American people with a firm assurance that the 
FBI is acting properly under the taw. 

The issuance of these Guidelines represents the culmination of the historical evolution of 
the FBI and the policies governing its domestic operations subsequent to the September 1 1 , 2001, 
terrorist attacks on the United States. Reflecting decisions and directi ves of the President and the 
Attorney Genera!* inquiries and enactments of Congress, and the conclusions of national 
commissions, it was recognized that the FBFs functions needed to be expanded and better 
integrated to meet contemporary realities: 

[Continuing coordination ... is necessary to optimize the FBFs performance in 
both national security and criminal investigations .... [The] new reality requires first 
that the FBI and other agencies do a better job of gathering intelligence inside the United 
States, and second that we eliminate the remnants of the old ‘Vail" between foreign 
intelligence and domestic law enforcement. Both tasks must be accomplished without 
sacrificing our domestic liberties and the rule of law, and both depend on building a very 
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different FBI famn the one we had on September 10, 2001. (Report of the Commission 

on the Intelligence Capabilities of the United States Regarding Weapons of Mass. 

Destruction 466,, 452 (2005).) 

In line with these objectives, the FBI has reorganized and reoriented its programs and 
missions, and the guidelines issued by the Attorney General for FBI operations have been 
extensively revised over the past several years. Nevertheless, the principal directives of the 
Attorney General governing the FBFs conduct of criminal investigations, national security 
investigations, and foreign intelligence collection have persisted as separate documents involving 
different standards and procedures for comparable activities. These Guidelines effect a more 
complete integration and harmonization of standards, thereby providing the FBI and other 
affected Justice Department components with clearer, more consistent, and more accessible 
guidance for their activities, and making available to the public in a single document the basic 
body of rules for the FBI’s domestic operations. 

These Guidelines also incorporate effective oversight measures involving many 
Department of Justice and FBI components, which have been adopted to ensure that all FBI 
activities are conducted in a manner consistent with law and policy. 

The broad operational areas addressed by these Guidelines are the FBTs conduct of 
investigative and intelligence gathering activities, including cooperation and coordination with 
other components and agencies in such activities, and the intelligence analysis and planning 
functions of the FBI, 

A. FBI RESPONSIBILITIES - FEDERAL CRIMES, THREATS TO THE 

NATIONAL SECURITY, FOREIGN INTELLIGENCE 

Part Hof these Guidelines authorizes the FBI to carry out investigations to detect, obtain 
information about, or prevent or protect against federal crimes or threats to the national security 
or to collect foreign intelligence. The major subject areas of information gathering activities 
under these Guidelines federal crimes, threats to the national security, and foreign intelligence 
are not distinct, but rather overlap extensively. For example, an investigation relating to 
international terrorism will invariably crosscut these areas because international terrorism is 
included under these Guidelines' definition of "threat to the national security/ 1 because 
international terrorism subject to investigation within the United States usually involves criminal 
acts that violate federal law, and because information relating to international terrorism also falls 
within the definitio n of “foreign intelligence/' Likewise, counterintelligence activities relating to 
espionage are likely to concern matters that constitute threats to the national security, that 
implicate violations or potential violations of federal espionage laws, and that involve 
information falling under the definition of "foreign intelligence” 

While some distinctions in the requirements and procedures for investigations are 
necessary in different subject areas, the general design of these Guidelines is to take a uniform 
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approach wherever possible, thereby promoting certainty and consistency regarding the 
applicable standards and facilitating compliance with those standards. Hence, these Guidelines 
do not require that the FBI’s information gathering activities be differentially labeled as “criminal 
investigations,™ “national security investigations,™ or “foreign intelligence col lections,” or that 
the categories of FBI personnel who cany out investigations be segregated from each other based 
on the subject areas in which they operate. Rather, all of the FBI’s legal authorities are available 
for deployment in all cases to wluch they apply to protect the public from crimes and threats to 
the national security and to further the United States' foreign intelligence objectives. In many 
cases, a single investigation will be supportable as an exercise of a number of these authorities 
i.e,, as an investigation of a federal crime or crimes, as an investigation of a threat to the national 
security, and/or as a collection of foreign intelligence, 

1. Federal Crimes 

The FBI has the authority to investigate all federal crimes that are not exclusively 
assigned to other agencies. In most ordinary criminal investigations, the immediate objectives 
include such matters as: determining whether a federal crime has occurred or is occurring, or if 
planning or preparation for such a crime is taking place; identifying, locating, and apprehending 
the perpetrators; and obtaining the evidence needed for prosecution. Hence, close cooperation 
and coordination with federal prosecutors in the United Slates Attorneys* Offices and the Justice 
Department litigating divisions are essential both to ensure that agents have the investigative 
tools and legal advice at their disposal for which prosecutorial assistance or approval is needed, 
and to ensure that investigations are conducted in a manner that will lead to successful 
prosecution. Provisions in many parts of these Guidelines establish proc edures and requirements 
for such coordination. 

2, Threats to the National Security 

The FBI’s authority to investigate threats to the national security derives from the 
executive order concerning US. intelligence activities, from delegations of functions by the 
Attorney General, and from various statutory sources. See* c.g,, E.G. 12333; 50 U.S.C. 401 cl 
scq.; 50 UJS.C 1 KOI etseq. These Guidelines (Fart VUS) specifically define threats to the 
national security to mean: international terrorism; espionage and other intelligence activities, 
sabotage, and assassination, conducted by, for, or on behalf of foreign powers, organizations, or 
persons, foreign computer intrusion; and other matters determined by the Attorney General, 
consistent with Executive Order 12333 or any successor order. 

Activities within the definition of “threat to the national security’' that are subject to 
investigation under these Guidelines commonly involve violations (or potential violations) of 
federal criminal laws. Hence, investigations of such threats may constitute an exercise both of 
the FBI 1 s criminal investigation authority and of the FBI’s authority to investigate threats to the 
national security. As with criminal investigations generally, detecting and solving the crimes, 
and eventually arresting and prosecuting the perpetrators, are likely to be among the objectives of 
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investigations relating to threats to the national security. But these investigations also often serve 
important purposes outside the ambit of normal criminal investigation and prosecution, by 
providing the basis for, and informing decisions concerning, other measures needed to protect the 
national security, These measures may include, for example: excluding or removing persons 
involved in terrorism or espionage from the United Stales: recruitment of double agents; freezing 
assets of organizations that engage in or support terrorism; securing targets of terrorism or 
espionage; providing threat information and warnings to other federal, slate, local, and private 
agencies and entities; diplomatic or military actions; and actions by other intelligence agencies to 
counter intemati onal terrorism or other national security threats. 

In line with this broad range of purposes, investigations of threats lo the national security 
present special needs to coordinate with other Justice Department components, including 
particularly the Justice Department's National Security Division, and to share informal] on and 
cooperate with other agencies with national security responsibilities, including other agencies of 
the U,S. Intelligence Community, the Department of Homeland Security, and relevant Whit? 
House (including National Security Council and Homeland Security Council) agencies and 
entities. Various provisions in these Guidelines establish procedures and requirements to 
facilitate such coordination. 

3. Foreign Intelligence 

As with the investigation of threats to the national security, the FBI's authority to collect 
foreign intelligence derives from a mixture of administrative and statutory sources. See, c.g., 

E.O 12333; 50U.S.C. 401 etseq.; 50U.S.C. 1801 et seq.; 28 U,S,C 532 note (incoiporatuig 
P.L. 1 OS-45 8 §§ 2001-2003). These Guidelines (Part VILE) define foreign intelligence to mean 
“information relating to the capabilities, intentions, or activities of foreign governments or 
elements thereof, foreign organizations or foreign persons, or international terrorists." 

The FBI's foreign intelligence collection activities have been expanded by legislative and 
administrative reforms subsequent to the September 11, 2001, terrorist attacks, reflecting the 
FBI's rote as the primary collector of foreign intelligence within the United States, and the 
recognized imperative that the United States' foreign intelligence collection activities become 
more flexible, more proactive, and more efficient in order to protect the homeland and adequately 
inform the United Slates' crucial decisions in its dealings wilh the rest of the world: 

The collection of information is the foundation of everything that the Intelligence 
Community does. While successful collection cannot ensure a good analytical product, 
the failure to collect information . . . turns analysis into guesswork, And as our review 
demonstrates, the Intelligence Community's human and technical intelligence collection 
agencies have collected far loo little information on many of the issues we care about 
most. (Report of the Commission on the Intelligence Capabilities of the United States 
Regarding Weapons of Mass Destruction 35] (2005),) 
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These Guidelines accordingly provide standards, and procedures for the FBI's foreign intelligence 
collection activities that meet current needs and realities and optimize the FBI’s ability to 
discharge its foreign intelligence eol lection functions. 

The authority to collect foreign intelligence extends the sphere of the FBTs information 
gathering activities beyond federal crimes and threats to the national security, and permits the 
FBI to seek information regarding a broader range of matters relating to foreign powers, 
organizations, or persons that may be of interest to the conduct of the United States’ foreign 
affairs. The FBFs role is central to the effective collection of foreign intelligence wilhin the 
United Slates because the authorized domestic activities of other intelligence agencies arc more 
constrained than those of the FBI under applicable statutes and Executive Order 12333. In 
collecting foreign intelligence, the FBI will generally be guided by nationally-determined 
intelligence requirements, including the National Intelligence Priorities Framework and the 
National HUMINT Collection Directives, or any successor directives issued under the authority 
of the Director of National Intelligence (DNI) As provided in Part Vll.F of these Guidelines, 
foreign intelligence requirements may also be established by the President or Intelligence 
Community officials designated by the President, and by the Attorney General, the Deputy 
Attorney General, or an official designated by the Attorney General. 

The general guidance of the FBI’s foreign intelligence collection activities by DNI- 
authorized requirements does not, however, limit the FBI's authority to conduct investigations 
supportable on the basis of its other authorities - 10 investigate federal crimes and threats to the 
national security in areas in which the information sought also falls under the definition of 
foreign intelligence. The FBI conducts investigations of federal crimes and threats to the 
national security based on priorities and strategic objectives set by the Department of Justice and 
the FBI, independent of DNFeslabILshed foreign intelligence collection requirements. 

Since the authority to collect foreign intelligence enables the FBI to obtain information 
pertinent to the United States' conduct of its foreign affairs, even if that information is not related 
to criminal activity or threats to the national security, the information so gathered may concern 
lawful activities. The FBI should accordingly operate openly and consensual ly with US, persons 
to the extent practicable when collecting foreign intelligence that does not concern criminal 
activities or threats to the national security. 

B, THE Fill AS AN INTELLIGENCE AGENCY 

The FBI is an intelligence agency as well as a law enforcement agency. Its basic 
functions accordingly extend beyond limited investigations of discrete matters, and include 
broader analytic and planning functions. The FBI’s responsibilities in this area derive from 
various administrative and statutory sources. See, e.g. + E.O. 12333; 28 U,S,C 532 note 
(incorporating P,L. 1 OS-458 §§ 2001-2003) and 534 note (incorporating P.L. 109-162 § f 107). 
Enhancement of the FBI’s intelligence analysis capabilities and functions has consistently been 
recognized as a key priority in the legislative and administrative reform efforts following the 
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September 11, 2001, terrorist attacks' 

fCoimteiterrorism] strategy should . , , encompass specific efforts to . . . enhance the 
depth and quality of domestic intelligence collection and analysis . , , , [TJhe FBI should 
strengthen and improve its domestic [intelligence] capability as fully and expeditiously as 
possible by immediately instituting measures to . . . significantly improve strategic 
analytical capabilities .... (Joint Inquiry into Intelligence Community Activities Before 
and After the Terrorist Attacks of September U, 200], S, Rep. No. 351 & H.R. Rep. No. 
792 t 1 07th Cong* 2d Sess. 4-7 (2002) (errata print),) 

A "smart’ 1 government would integrate all sources of information to sec the enemy as a 
whole. Integrated all-source analysis should also inform and shape strategies to collect 
more intelligence. . . . The importance of integrated, all-souiee analysis cannot be 
overstated. Without it, it is not possible to “connect the dots,* 1 (Final Report of the 
National Commission on Terrorist Attacks Upon the United States 401 , 40S (2004).) 

Part IV of these Guidelines accordingly authorizes the FBI to engage in intelligence 
analysis and planning* drawing on all lawful sources of information. The functions authorized 
under that Part include: (i) development of overviews and analyses concerning threats to and 
vulnerabilities of the United States and its interests, (ii) research and analysis to produce reports 
and assessments concerning matters relevant to investigative activities or other authorized FBI 
activities, and (iii) the operation of intelligence systems that facilitate and support investigations 
through the compilation and analysis of data and information on an ongoing basis. 

C. OVERSIGHT 

The activities authorized by these Guidelines must be conducted in a manner consistent 
with all applicable laws, regulations, and policies, including those protecting privacy and civil 
liberties. The Justice Department’s National Security Division and the FBFs Inspection 
Division, Office of General Counsel, and Office of Integrity and Compliance, along with other 
components, share the responsibility to ensure that the Department meets these goals with respect 
to national security and foreign intelligence matters. In particular, the National Security 
Division's Oversight Section, in conjunction with the FBI's Office of General Counsel, is 
responsible for conducting regular reviews of all aspects of FBI national security and foreign 
intelligence activities. These reviews* conducted at FBI field offices and headquarter units, 
broadly examine such activities for compliance with these Guidelines and other applicable 
requirements. 

Various features of these Guidelines facilitate the National Security Division’s oversight 
functions. Relevant requirements and provisions include: (i) required notification by the FBI to 
the National Security Division concerning full investigations that involve foreign intelligence 
collection or investigation of United States persons in relation to threats of the national security* 
(ii) annual reports by the FBI to the National Security Division concerning the FBI’s foreign 
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intelligence collection program* including information on the scope and nature of foreign 
intelligence collect ion activities in each FBI field office, and (hi) access by the National Security 
Division to information obtained by the FBI through national security or foreign intelligence 
activities and genera] authority for the Assistant Attorney General for National Security to obtain 
reports from the FBI concerning these activities. 

Pursuant to these Guidelines, other Attorney General guidelines, and institutional 
assignments of responsibility within the Justice Department, additional Department components 
- including the Criminal Division, the United States Attorneys* Offices, and the Office of 
Privacy and Civil Liberties are involved in the common endeavor with the FBI of ensuring that 
the activities of all Department components are lawful, appropriate, and ethical as well as. 
effective Examples include the involvement of both FBI and prosecutorial personnel in the 
review of undercover operations involving sensitive circumstances, notice requirements for 
investigations involving sensitive investigative matters (as defined in Part vn.N of these 
Guidelines), and notice and oversight provisions for enterprise investigations, which may involve 
a broad examination of groups implicated in the gravest criminal and national security threats. 
These requirements and procedures help to ensure that the rule of law is respected in the 
Department’s activities and that public confidence is maintained in these activities. 
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t GENERAL AUTHORITIES AND PRINCIPLES 

A. SCOPE 

These Guidelines apply to investigative activities conducted by the FBI within the United 
States or outside the territories of all countries. They do not apply to investigative 
activities of the FBlin foreign countries, which are governed by the Attorney GeneraTs 
Guidelines for Extraterritorial FBI Operations 

B. GENERAL AUTHORITIES 

1 . The FBI is authorized to conduct investigations to detect, obtain information 
about, and prevent and protect against federal crimes and threats to the national 
security and to collect foreign intelligence, as provided in Part II of these 
Guidelines, 

2 . The FBI is authorized to provide investigative assistance to other federal agencies, 
state, local, or tribal agencies, and foreign agencies as provided in Part LU of these 
Guidelines. 

3. The FBI is authorized to conduct intelligence analysis and planning as provided in 
Part IV of these Guidelines. 

4. The FBI is authorized to retain and share information obtained pursuant to these 
Guidelines as provided in Part VI of these Guidelines, 

C. USE OK AUTHORITIES AND M ETHO DS 

1. Protection of the United States and Its People 

The FBI shall fully utilize the authorities provided and the methods authorized by 
these Guidelines to protect the United States and its people from crimes in 
violation of federal law and threats to the national security, and to further the 
foreign intelligence objectives of the United States. 

2, Choice of M el bods 

a. The conduct of investigations and other activities authorized by these 

Guidelines may present choices between the use of different investigative 
methods that are each operationally sound and Effective, but that are more 
or less intrusive, considering such factors as the effect on the privacy and 
civil liberties of individuals and potential damage to reputation. The least 
intrusive method feasible is to be used in such situations. It is recognized, 
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however, that the choice of methods is a matter of judgment. The FBI 
shall not hesitate to use any lawful method consistent with these 
Guidelines, even if intrusive, where the degree of intrusiveness is 
warranted in light of the seriousness of a criminal or national security 
threat or the strength of the information indicating its existence, or in light 
of the importance of foreign intelligence sought to the United States 1 
interests, This point is to be particularly observed in investigations 
relating to terrorism, 

b. United States persons shall be dealt with openly and consensual ly to the 
extent practicable when collecting foreign intelligence that does not 
concern criminal activities or threats to the national security. 

3. Respect for Legal Rights 

All activities under these Guidelines must have a valid purpose consistent with 
these Guidelines, and must be carried out in conformity with the Constitution and 
all applicable statutes, executive orders. Department of Justice regulations and 
policies* and Attorney General guidelines. These Guidelines do not authorize 
investigating or collecting or maintaining information on United States persons 
solely for the purpose of monitoring activities protected by the First Amendment 
or the lawful exercise of other rights secured by the Constitution or taws of the 
United States. These Guidelines also do not authorize any conduct prohibited by 
the Guidance Regarding the Use of Race by Federal Law Enforcement Agencies. 

4. Undisclosed Participation in Organisations 

Undisclosed participation in organizations in activities under these Guidelines 
shall be conducted in accordance with FBI policy approved by the Attorney 
General. 

5* Maintenance flf Records under the Privacy Act 

The Privacy Act restricts the maintenance of records relating to certain activities 
of individuals who are United States persons, with exceptions for circumstances 
in which the collection of such information is pertinent to and within the scope of 
an authorized law enforcement activity or is otherwise authorized by statute, 5 
U.S.C, 552a(c)(7), Activities authorized by these Guidelines are authorized law- 
enforcement activities or activities for which there is otherwise statutory authority 
for purposes of the Privacy Act. These Guidelines, however, do not provide an 
exhaustive enumeration of authorized FBI law enforcement activities or FBI 
activities for which there is otherwise statutory authority, and no restriction is 
implied with respect to such activities carried out by the FBI pursuant to other 
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authorities, Further questions about the application of the Privacy Act to 
authorized activities of the FBI should be addressed to the FBI Office of the 
General Counsel, the FBI Privacy and Civil Liberties Unit, or the Department of 
Justice Office of Privacy and Civil Liberties. 

NATURE AND APPLICATION OF THE GUIDELINES 

1. Repealers 

These Guidelines supersede the following guidelines, which are hereby repealed: 

a. The Attorney General’s Guidelines on General Crimes, Racketeering 
Enterprise and Terrorism Enterprise Investigations (May 30, 2002) and all 
predecessor guidelines thereto. 

b. The Attorney GeneraTs Guidelines for FBT National Security 
investigations and Foreign Intelligence Collection (October 31, 2003} and 
all predecessor guidelines thereto. 

c, The Attorney GeneraTs Supplemental Guidelines for Collection, 

Retention, and Dissemination of Foreign Intel Itgence (November 29, 
2006). 

d, The Attorney General Procedure for Repotting and Use of information 
Concerning Violations of Law and Authorization for Participation in 
Otherwise Illegal Activity in FBI Foreign Intelligence, Counterintelligence 
or International Terrorism Intel Itgence Investigations (August S, 1988). 

c. The Attorney General's Guidelines for Reporting on Civil Disorders and 
Demonstrations Involving a Federal Interest (April 5, 1976). 

2. Status as internal Guidance 

These Guidelines are set forth solely for the purpose of internal Department of 
Justice guidance. They aje not intended to, do not, and may not be relied upon to 
create any rights, substantive or procedural, enforceable by law by any party in 
any matter, civil or criminal, nor do they place any limitation on otherwise lawful 
investigative and lltigative prerogatives of the Department of Justice. 

3. Departures from the Guidelines 

Departures from these Guidelines must be approved by the Director of the FBI, by 
the Deputy Director of the FBI, or by an Executive Assistant Director designated 
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by the Director If a departure is necessary without such prior approval because of 
the immediacy or gravity of a threat to the safety of persons or property or to the 
national security, the Director, the Deputy Director, or a designated Executive 
Assistant Director shall be notified as soon thereafter as practicable. The FBI 
shall provide timely written notice of departures from these Guidelines 10 the 
Criminal Division and the National Security Division, and those divisions shall 
notify the Attorney General and the Deputy Attorney General. Notwithstanding 
this paragraph, all activities in all circumstances must be carried out in a manner 
consistent with the Constitution and laws of the United States. 

Other Activities Not Limited 

These Guidelines apply to FBI activities as provided herein and do not limit other 
authorized activities of the FBI* such as the FBI’s responsibilities to conduct 
background cheeks and inquiries concerning applicants and employees under 
federal personnel security programs, the FBI's maintenance and operation of 
national criminal records systems and preparation of national crime statistics, and 
the forensic assistance and administration functions of the FBI Laboratory. 
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IL INVESTIGATIONS MP JJ^ E L LICENCE GATHERING 

This Part of the Guidelines authorizes the FBI to conduct investigations to detect, obtain 
information about, and prevent and protect against federal crimes and threats to the national 
security and to collect foreign intelligence, 

When an authorized purpose exists, the focus of activities authorized by this Part maybe 
whatever the circumstances warrant. The subject of such an activity may be, for example, a 
particular crime or threatened crime; conduct constituting a threat to (he national security; an 
individual, group, or organization that may be involved in criminal or national security- 
threatening conduct; or a topical matter of foreign intelligence interest. 

Investigations may also be undertaken for protective purposes in relation to individuals, 
groups, or other entities that may be targeted for criminal victimization or acquisition, or for 
terrorist attack or other depredations by the enemies of the United States, For example, the 
participation of the FBI in special events management, in relation to public events or other 
activities whose character may make them attractive targets for terrorist attack, is an authorized 
exercise of the authorities conveyed by these Guidelines. Likewise, FBI counterintelligence 
activities directed to identifying and securing facilities, personnel, or information that may be 
targeted for infiltration, recruitment, or acquisition by foreign intelligence services are authorized 
exercises of the authorities conveyed by these Guidelines. 

The identification and recruitment of human sources - who may be able to provide or 
obtain information relating le criminal activities, information relating to terrorism, espionage, or 
other threats to the national security, or information relating to matters of foreign intelligence 
interest is also critical to the effectiveness of the FBI's law enforcement, national security, and 
intelligence programs, and activities undertaken for this purpose are authorized and encouraged. 

The scope of authorized activities under this Part is not limited to ‘investigation" in a 
narrow sense, such as solving particular cases or obtaining evidence for use in particular criminal 
prosecutions. Rather, these activities also provide critical information needed for broader 
analytic and intelligence purposes to facilitate the solution and prevention of crime, protect the 
national security, and further foreign intelligence objectives. These purposes include use of the 
information in intelligence analysis and planning under Part IV, and dissemination of the 
information to Other law enforcement. Intelligence Community, and White House agencies under 
Part VI. Information obtained at all stages of investigative activity is accordingly to be retained 
and disseminated for these purposes as provided in these Guidelines, or in FBI policy consistent 
with these Guidelines, regardless of whether it furthers investigative objectives in a narrower or 
more immediate sense. 

In the course of activities under these Guidelines, the FBI may incidentally obtain 
information relating to matters outride of its areas of primary investigative responsibility. For 
example, information relating to violations of stale or local law or foreign law may be 


16 


Arl7 

UNCLASSIFIED - FOR OFFICIAL USE GNLV 


Veraon Dalfld: 
OctobarlS. 2011 



UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic InvasligaUons and Operations Guide 


incidentally obtained in the course of investigating federal crimes or threats to the national 
security or in collecting foreign intelligence. These Guidelines do not bar the acquisition of such 
information in the course of authorized investigative activities, the retention of such information* 
or its dissemination as appropriate to the responsible authorities in other agencies or 
jurisdictions. Part VI of these Guidelines includes specific authorizations and requirements for 
sharing such in format ion with relevant agencies and officials. 

This Part authorized different levels of information gathering activity, which afford the 
FBI flexibility, under appropriate standards and procedures, to adapt the methods utilized and the 
information sought to the nature of the matter under investigation and the character of the 
information supporting the need for investigation. 

Assessments, authorized by Subpart A of this Part, require an authorized purpose but not 
any particular factual predication. For example, to cany out its central mission of preventing the 
commission of terrorist acts against the United States and its people, the FBI must proactively 
draw on available sources of information to identify terrorist threats and activities. It cannot be 
content to wait for leads to come in drrough the actions of others, but rather must be vigilant in 
detecting terrorist activities to the full extent permitted by law, with an eye towards early 
intervention and prevention of acts of terrorism before they occur. Likewise, in (he exercise of 
its protective functions, the FBI is not constrained to wait until information is received indicating 
that a particular event, activity, or facility has drawn the attention of those who would threaten 
(he national security. Rather* the FBI must lake the initiative to secure and protect activities and 
entities whose character may make them attracti ve targets for terrorism or espionage. The 
proactive investigative authority conveyed in assessments is designed for, and may be utilized by. 
the FBI in the discharge of these responsibilities. For example, assessments may be conducted as 
part of the FBI's special events management activities. 

More broadly, detecting and interrupting criminal activities at their early stages, and 
preventing crimes from occurring in the first place, is preferable to allowing criminal plots and 
activities to come to fruition. Hence, assessments may be undertaken proactively with such 
objectives as detecting criminal activities, obtaining information on individuals, groups, or 
organizations of possible investigative interest, either because they may be involved in criminal 
or national security-threatening activities or because they may be targeted for attack or 
victimization by such activities; and identifying and assessing individuals who may have value as 
human sources. For example, assessment activities may involve proactively surfing the Internet 
to Ibid publicly accessible websites and services through which recruiunent by terrorist 
organizations and promotion of terrorist crimes is openly taking place; through which child 
pornography is advertised and traded; through which efforts arc made by sexual predators to lure 
children for purposes of sexual abuse; or through which fraudulent schemes are perpetrated 
against the public. 

The methods authorized in assessments arc generally those of relatively low 
intrusivcncss, such as obtaining publicly available information* checking government records, 
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and requesting information from members of the public. These Guidelines do not impose 
supervisory approval requirements in assessments, given the types of techniques that are 
authorized at this stage (e g., perusing the Internet for publicly available information), However, 
FBI policy will prescribe supervisory approval requirements for certain assessments, considering 
such mailers as the purpose of the assessment and the methods being utilized. 

Beyond the proactive information gathering functions described above, assessments may 
be used when allegations or other information concerning crimes or threats to the national 
security is received or obtained, and the matter can be checked out or resolved through the 
relatively non-inlrusivc methods authorized in assessments. The checking of investigative leads 
in this manner can avoid the need to proceed to more formal levels of investigative activity, if the 
results of an assessment indicate that further investigation is not warranted. 

Subpart B of this Part authorizes a second level of investigative activity, predicated 
investigations. The purposes or objectives of predicated investigations are essentially the same 
as those of assessments, but predication as provided in these Guidelines is needed — generally, 
allegations, reports, facts or circumstances indicative of possible criminal or national security- 
threatemng activity, or the potential for acquiring information responsive to foreign intelligence 
requirements ■ and supervisory approval must be obtained, to initiate predicated investigations. 
Corresponding to the stronger predication and approval requirements, all lawful methods may be 
used in predicated investigations, A classified directive provides further specification concerning 
circumstances supporting certain predicated investigations. 

Predicated investigations that concern federal crimes or threats to the national security are 
subdivided into preliminary investigations and hill investigations. Preliminary investigations 
may be initiated on the basis of any allegation or information indicative of possible criminal or 
national security-threatening activity, but more substantial factual predication is required For full 
investigations. While time limits are set for the completion of preliminary investigations, full 
investigations may be pursued without preset limits on their duration. 

The final investigative category under this Part of the Guidelines is enterprise 
investigations, authorized by Subpait C, which permit a general examination of the structure, 
scope, and nature of certain groups and organizations. Enterprise investigations are a type of full 
investigations. Hence, they are subject to the purpose, approval, and predication requirements 
that apply to full investigations, and all lawful methods may be used in canying them out. The 
distinctive characteristic of enterprise investigations is that they concern groups or organizations 
that may be involved in the most serious criminal or national security threats to the public - 
generally, patterns of racketeering, activity, terrorism or other threats to the national security, or 
the commission of offenses characteristically involved in terrorism as described in lit US.C, 
2332b{g)(5)(B), A broad examination of the characteristics of groups satisfying these criteria is 
authorized in enterprise investigations, including any relationship of the group to a foreign 
power, its size and composition, its geographic dimensions and finances, its past acts and goals, 
and its capacity for harm. 
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ASSESSMENTS 

1 . Purposes 

Assessments may be carried out to doted# obtain information about, or prevent or 
protect against federal crimes or threats to the national security or to collect 
foreign intelligence. 

2 . Approval 

The conduct; of assessments is subject to any supervisory approval requirements 
prescribed by FBI policy. 

3. Authorized Activities 

Activities that may be carried out for the purposes described in paragraph 1 . in an 
assessment include: 

a. seeking information, proactively or in response to investigative leads, 
relating to: 

i. activities constituting violations of federal criminal law or threats 
to the national security, 

ii. the involvement or role of individual s t groups, or organizations in 
such activities; or 

iii. matters of foreign intelligence interest responsive to foreign 
intelligence requirements; 

b . identifying and o btaining information about potential targets o f or 
vulnerabilities to criminal activities in violation of federal law or threats to 
the national security; 

c, seeking information to identify potential human sources, assess the 
suitability, credibility, or value of individuals as human sources, validate 
human sources, or maintain the cover or credibility of human sources, who 
may be able to provide or obtain information relating to criminal activities 
in violation of federal kw, threats to the national security, or matters of 
foreign intelligence interest; and 

d, obtaining information to inform or facilitate intelligence analysis and 
planning as described in Part IV of these Guidelines. 
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4. Authorized Methods 

Only the (knowing methods may be used in assessments: 

a. Obtai n public !y aval lable information, 

b. Access and examine FBI and other Department of Justice records* and 
obtain information from any FBI or other Department of Justice personnel. 

c . Access and examine records maintained by, and request information from* 
other federal, state, local* or tribal, or foreign governmental entities or 
agencies. 

d Use online services and resources (whether nonprofit or commercial). 

e. Use and recruit human sources in conformity with the Attorney General’s 
Guidelines Regarding the Use of FBI Confidential Human Sources, 

f. Interview or request information from members of the public and private 

entities. 

g Accept information voluntarily provided by governmental or private 

entities. 

h. Engage in observation or surveillance not requiring a court order. 

i, Grand jury subpoenas for telephone or electronic mail subscriber 
information, 

PREDICATED INVESTIGATIONS 

1. Purposes 

Predicated investigations may be carried out to detect, obtain information about, 
or prevent or protect against federal crimes or threats to the national security or to 
collect foreign Lntelligence- 

2 . Approval 

The initiation of a predicated investigation requires supervisory approval at a level 
or levels specified by FBI policy, A predicated investigation based on paragraph 
3,c. (relating to foreign intelligence) must be approved by a Special Agent in 
Charge or by an FBI Headquarters official as provided in such policy. 
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Circumstances Warranting Investigation 

A predicated investigation may be initiated on the basis of any of the following 
circumstances: 

a. An activity constituting a federal crime or a threat to the national security 
has or may have occurred, is or may be occurring, or will or may occur and 
the investigation may obtain information relating to the activity or the 
involvement or role of an individual, group, or organisation in such 
activity. 

b. An individual, group, organization,, entity, information, property, or 
activity is or may be a target of attack, victimization, acquisition, 
infiltration, or recruitment in connection with criminal activity in violation 
of federal law or a threat to the national security and the investigation may 
obtain information that would help to protect against such activity or 
threat. 

c. The investigation may obtain foreign intelligence that is responsive to a 
foreign intelligence requirement 

Preliminary and f ull Investigations 

A predicated investigation relating to a federal crime or threat to the national 
security may be conducted as a preliminary investigation or a full investigation. A 
predicated investigation that is based solely on the authority to collect foreign 
intelligence may be conducted only as a full investigation. 

a. Preliminary investigations 

i. Fred kali uu Required fur Preliminary Investigations 

A preliminary investigation may he initiated on the basis of 
information or an allegation indicating the existence of a 
circumstance described in paragraph 3.a.-.b. 

i i ■ Du ration of Prel i m i nary l u vcstiga lions 

A preliminary investigation must be concluded within six months 
of its initiation, which may be extended by up to six months by the 
Special Agent in Charge. Extensions of preliminary investigations 
beyond a year must be approved by FBI Headquarters. 
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ill. Methods Allowed In Preliminary Investigations 

All lawful methods may be used in a preliminary investigation 
except for methods within the scope of Part V.A.I L-. 13, of these 
Guidelines, 

b. Full Investigations 

L Predication Required for Full loveatigations 

A full investigation maybe initiated if there is an articulable 
factual basis for the investigation that reasonably indicates that a 
circumstance described in paragraph 3.a--b. exists or if a 
circumstance described in paragraph 3.c. exists. 

if Methods Allowed in Full Investigations 

All lawful methods may be used in a full investigation. 

Notice Requirements 

a. An FBI field office shall notify FBI Headquarters and the United States 
Attorney or other appropriate Department of Justice official of the 
initiation by Ihe field office of a predicated investigation involving a 
sensitive investigative matter- If the investigation is initiated by FBI 
Headquarters, FBI Headquarters shall notify the United States Attorney or 
other appropriate Department of Justice official of the initiation of such an 
investigation. If the investigation concerns a threat to the national 
security, an official of the National Security Division must be notified. 

The notice shall identify all sensitive investigative matters involved in the 
investigation. 

b. The FBI shall notify the National Security Division of: 

i the initiation of any full investigation of a United States person 
relating to a throat to the national security; and 

ii. the initiation of any full investigation that is based on paragraph 
3 c (relating to foreign intelligence). 

c. The notifications under subparagraphs a, and b, shall be made as soon as 
practicable, but no later than 30 days after the initiation of an 
investigation. 
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d, The FBI shall notify the Deputy Attorney General if FBI Headquarters 
disapproves a field office’s initiation of a predicated investigation relating 
to a threat to the national security on the ground that the predication for the 
investigation is insufficient. 

G ENTERPRISE INVESTIGATIONS 

1. Definition 

A full investigation of a group or organization may be initiated as an enterprise 
investigation if there is an articulable factual basis for the investigation that 
reasonably indicates that the group or organisation may have engaged or may be 
engaged in, or may h ave or may be engaged in p lanning or preparation or 
provision of support for: 

a. a pattern of racketeering activity as defined in 18 U.S.C. 1961(5); 

b. international terrorism or other throat to the national security; 

c. domestic terrorism as defined ill 1 8 U.S.C 2331(5) involving a violation 
of federal criminal law; 

d- furthering political or social goals wholly or in part through activities that 
involve force or violence and a violation of federal criminal law; or 

e. an offense described in 18 US.C, 2332h{g)(5XB) or 18 U.S.C, 43. 

2. Scope 

The information sought in an enterprise investigation may include a general 
examination of the structure, scope, and nature of the group or organization 
including: its relationship, if any, to a foreign power; the identity and relationship 
of its members, employees, or other persons who may be acting in furtherance of 
its objectives; its finances and resources; its geographical dimensions; and its past 
and future activities and goats. 

3. Notice and Reporting Requirements 

a. The responsible Department of Justice component for the purpose of 

notification and reports in enterprise investigations is the National Security 
Division, except that, for the purpose of notifications and reports in an 
enterprise investigation relating to a pattern of racketeering activity that 
does not involve an offense or offenses described in 1 8 U.S.C. 
2332b(g)(5)(B), the responsible Department of Justice component is the 
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Organized Crime and Racketeering Section of the Criminal Division. 

b. An FBI field office shall notify FBI Headquarters of the initiation by the 
Field office of an enterprise investigation, 

c. The FBI shall notify the National Security Division or the Organized 
Crime and Racketeering Section of the initiation of an enterprise 
investigation, whether by a field office or by FBI Headquarters, and the 
component so notified shall notify the Attorney' General and the Deputy 
Attorney General. The FBI shall also notify any relevant United States 
Attorney’s Office, except that any investigation wi thin the scope of Part 
VLD.l.d of these Guidelines (relating to counterintelligence 
investigations) is to be treated as provided in that provision. Notifications 
by the FBI under this subparagraph shall be provided as soon as 
practicable, but no later than 30 days after the initiation of the 
investigation. 

d. The Assistant Attorney General for National Security or the Chief of the 
Organized Crime and Racketeering Section, as appropriate, may at any 
time request the FBI to provide a report on the status of an enterprise 
investigation and the FBI will provide such reports as requests!, 
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HI- ASSISTANCE TO OTHER AGEN CIES 

The FBI is authorized to provide investigative assis-tanec to other federal, slate, local, or 
tribal, or Foreign agencies as provided in this Part 

The investigative assistance authorized by this Part is often concerned with the same 
objectives as those identified in Part II of those Guidelines - investigating federal crimes and 
threats to the national security, and collecting foreign intelligence. In some cases, however, 
investigative assistance to other agencies is legally authorized for purposes other than those 
identified in Part H, such as assistance in certain contexts to state or local agencies in the 
investigation of crimes under state or local law, see 28 U,S,C. 540, 540A, 540B, and assistance 
to foreign agencies in the investigation of foreign law violations pursuant to international 
agreements. Investigative assistance tor such legally authorized purposes is permitted under this 
Part, even if it is not for purposes identified as grounds for investigation under Part 11, 

The authorities provided by this Part arc cumulative to Part 11 and do not limit the FBTs 
investigative activities under Part 11, For example, Subparl B.2 in this Part authorizes 
investigative activities by the FBI in certain circumstances to inform decisions by the President 
concerning the deployment of troops to deal with civil disorders, and Subpart B J authorizes 
investigative activities to facilitate demonstrations and related public health and safety measures. 
The requirements and limitations in these provisions for conducting investigations for the 
specified purposes do not limit the FBI's authority under Part II to investigate federal crimes or 
threats to the national security that occur in the context of or in connection with civil disorders or 
demonstrations. 

A. THE INTELLIGENCE COMMUNITY 

The FBI may provide investigative assistance (including operational support) to 

authorized intelligence activities of other Intelligence Community agencies 

Eh FEDERAL AGENCIES GENERALLY 

L In General 

The FBT may provide assistance to any federal agency in the investigation of 
federal crimes or threats to the national security or in the collection of foreign 
intelligence, and investigative assistance to any federal agency for any other 
purpose that may be legally authorised, including investigative assistance to the 
Secret Service in support of its protective responsibilities. 

2 . The President in Relation to Civil Disorders 

a. At the direction of the Attorney General, the Deputy Attorney General, or 
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the Assistant Attorney General for the Criminal Division, the FBI shall 
collect information relating to actual or threatened civil disorders to assist 
the President in determining (pursuant to the authority of the President 
under 10 U,S.C. 331-33) whether use of (he aimed forces or militia is 
required and how a decision to commit troops should be implemented, 

The information sought shall concern such matters as: 

i. The size of the actual or threatened disorder, both in number of 
people involved or affected and in geographic area, 

ii „ The potent] al for violence. 

tii. The potential for expansion of the disorder in light of community 
conditions and underlying causes of the disorder, 

iv, The relationship of the actual or threatened disorder to the 
enforcement of federal law or court orders and the likelihood that 
state or local authorities will assist in enforcing those laws or 
ordem. 

v. The extent of state or local resources available to handle the 
disorder. 

b. Investigations under this paragraph will be authorized only for a period of 
30 days, but the authorization may be renewed for subsequent 30 day 
periods, 

c. Notwithstanding Subpari E2 of this Part, the methods that may be used in 
an investigation under this paragraph are those described in subparagraphs 
a ,-,d., subparagraph f (other than pretext interviews or requests), or 
subparagraph g. of Part II, A.4 of these Guidelines. The Attorney General, 
the Deputy Attorney General, or the Assistant Attorney General for the 
Criminal Division may also authorize the use of other methods described 
in Part II,A,4, 

Public Health and Safety Authorities in Relation to Demon st rations 

a. At the direction of the Attorney General, die Deputy Attorney General, or 
the Assistant Attorney General for the Criminal Division, the FBI shall 
collect information relating to demonstration activities that arc likely to 
require the federal government to take action to fimililatc the activities and 
provide public health and safety measures with respect to those activities. 
The information sought in such an investigation shall be that needed to 
facilitate an adequate federal response to ensure public health and safety 
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and to protect the exercise of First Amendment rights, such as: 

i. The time, place* and type of activities planned. 

ii. The number of persons expected to participate. 

iii. The expected means and routes of travel for participants and 
expected time of arrival 

iv. Any plans for lodging or bousing of participants in connection with 
the demonstration 

b. Notwithstanding Subpart E.2 of this Fart, the methods that may be used in 
an investigation under this paragraph are those described in subparagraphs 
a--d„ subparagraph f. (other than pretext interviews or requests}* or 
subparagraph g. of Fart ELA.4 of these Guidelines. The Attorney General, 
the Deputy Attorney General, or the Assistant Attorney General for the 
Criminal Division may also authorize the use of other methods described 
in Part H.A.4. 

C. STATE, LOCAL, OR TRIBAL AGENCIES 

The FBI may provide investigative assistance to state, local, or tribal agencies in the 
investigation of matters that may involve federal crimes or threats to tile national security, 
or for such other purposes as may be legally authorized. 

D. FOREIGN AGENCIES 

L At the request of foreign law enforcement, intelligence, or security agencies, the 
FBI may conduct investigations or provide assistance to investigations by such 
agencies, consistent with the interests of the United States (including national 
security interests) and with duo consideration of the effect on any United States 
person. Investigations or assistance under this paragraph must be approved as 
provided by FBI policy. The FBI shall notify the National Security Division 
concerning investigation or assistance under this paragraph where: (i) FBI 
Headquarters approval for the activity is required pursuant to the approval policy 
adopted by the FBI for purposes of this paragraph, and (ii) the activity relates to a 
threat to the national security. Notification to the National Security Division shall 
be made as soon as practicable but no later than 30 days after the approval. 
Provisions regarding notification to or coordination with the Central Intelligence 
Agency by the FBI in memoranda of understanding or agreements with the 
Central Intelligence Agency may also apply to activities under this paragraph. 

2. The FBI may not provide assistance to foreign law enforcement, intelligence* or 
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security officers conducting investigations within the United States unless such 
officers have provided prior notification to the Attorney General as required by IS 
U.S.&95L 

3. The FBI may conduct background inquiries concerning consenting individuals 
when requested by foreign government agencies. 

4, The FBI may provide other material and technical assistance to foreign 
governments to the extent not otherwise prohibited by law . 

APPLICABLE STANDARDS AND PROCEDURES 

1. Authorized investigative assistance by the FBI to other agencies under this Part 
includes joint operations and activities with such agencies, 

2. All lawful methods may be used in investigative assistance activities under this 
Part 

3. Where the methods used in investigative assistance activities under this Pari go 
beyond the methods authorized in assessments under Part EL A A of these 
Guidelines, the following apply: 

a. Supervisory approval must be obtained for the activity at a level or levels 
specified jn FBI policy. 

b. Notice must be provided concerning sensitive investigative matters in the 
manner described in Part ELBA. 

c. A database or records system must be maintained that permits, with 
respect lo each such activity, the prompt retrieval of the status o f the 
activity (open or closed), the dates of opening and closing, and the basis 
for the activity. This database or records system may be combined with 
the database or records system for predicated investigations required by 
Pan VLA.2. 
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iv. INTELLIGENCE ANALYSIS AND PLANNING 

The FBI is authorized to engage in analysis and planning. The FBI’s analytic activities 
enable the FBI to identify and understand trends, causes, and potential indicia of criminal activity 
and other threats to the United States that would noi he apparent from the investigation of 
discrete matter* alone. By means of intelligence analysis and strategic planning, the FBI can 
more effectively discover crimes, threats lo the national security, and other matters of national 
intelligence interest and can provide the critical support needed for the effective discharge of its 
investigative responsibilities and other authorized activities, For example, analysis of threats in 
the context of special events management, concerning public events or activities that maybe 
targeted for terrorist attack, is an authorized activity under this Fart. 

In carrying out its intelligence functions under this Fart, the FBI is authorized to draw on 
all la wiu I sources of information^ including but not limited to the results of investigative 
activities under these Guideline*. Investigative activities under these Guidelines and other 
legally authorized activities through which the FBI acquires information, data, or intelligence 
may properly be utilized, structured, and prioritized so as to support and effectuate the FBI’s 
intelligence mission. The remainder of this Part provides further specification concerning 
activities and functions authorized as part of that mission, 

A. STRATEGIC INTELLIGENCE ANALYSIS 

The FBI is authorized to develop overviews and analyses of threats to and vulnerabilities 
of the United Stales and its interests in areas related to the FBI’s responsibilities, 
including domestic and international criminal threats and activities; domestic and 
international activities, circumstances, and developments affecting the national security; 
and matters relevant to the conduct of the United States' foreign affairs. The overviews 
and analyses prepared under this Subpart may encompass present, emergent, and potential 
threats and vulnerabilities, their contexts and causes, and identification and analysis of 
means of responding to them 

B. REPORTS AND ASSESSMENTS GENERALLY 

The FBI is authorized to conduct research, analyze information, and prepare reports and 
assessments concerning matters relevant to authorized FBI activities, such as reports and 
assessments concerning: types of criminals or criminal activities; organized crime groups; 
terrorism, espionage, or other threats to the national security; foreign intelligence matters; 
or the scope and nature of criminal activity in particular geographic areas or sectors of the 
economy. 

C. INTELLIGENCE SYSTEMS 

The FBI is authorized to operate intelligence, identification, tracking, and information 
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systems in support of authorized investigative activities, or for such other or additional 
purposes as may bo legally authorized, such as intelligence and tracking Systems relating 
to terrorists, gangs, or organized crime groups. 
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V. AtJTHQmKP METHODS 

A. PARTICULAR METHODS 

All lawful investigative methods may be used in activities under these Guidelines as 
authorized by these Guidelines. Authorized methods include, but are not limited to. those 
identified in the following list. The methods identified in the list are in some instances subject to 
special restrictions qr review or approval requirements as noted: 

1 . The methods described in Pan Il.A.4 of these Guidelines. 

2 . Mail covers, 

3. Physical searches of personal or real property where a warrant or court order is not 
legally required because there is no reasonable expectation of privacy (e.g., trash 
covers), 

4. Consensual monitoring of communications, including consensual computer 
monitoring, subject to legal review by the Chief Division Counsel or the FBI 
Office of the General Counsel. Where a sensitive monitoring circumstance is 
involved, the monitoring inusl be approved by the Criminal Division or, if the 
investigation concents a threat to the national security or foreign intelligence, by 
the National Security Division. 

5. Use of closed-circuit television, direction lindens, and other monitoring devices, 
subject to legal review by the Chief Division Counsel or the FBI Office of the 
General Counsel. (The methods described in this paragraph usually do not require 
court orders or warrants unless they involve physical trespass or lion-consensual 
monitoring of communications, but legal rev iew is necessary to ensure 
compliance with all applicable legal requirements.) 

6. Polygraph examinations. 

7. Undercover operations. In investigations relating to activities in violation of 
federal criminal law that do not concern threats to the national security or foreign 
Intelligence, undercover operations must be carried our in conformity with the 
Attorney Genera] h s Guidelines on Federal Bureau oflnvcstigation Undercover 
Operations. In investigations that are not subject to the preceding sentence 
because they concern threats to the national security or foreign intelligence, 
undercover operations involving religious or political organizations must be 
reviewed and approved by FBI Headquarters, with participation by the National 
Security Division in the review process 

8 . Compulsory process as authorized by law, including grand j ury subpoenas and 
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other subpoenas, National Security Letters (15 U.S.C. I6SJU, 1681 v; I8US C, 
2709; 12 U.S.C 34] 4(a)(5)(A); 50 US,C. 436) t and Foreign Intelligence 
Surveillance Act orders for the production of tangible things (50 U.SLC, 1 £61-63). 

9 , Accessing stored wire and electronic comm unkat tons and transactional records in 
conformity with chapter 121 of title 1 8, United States Code (IB U,S,C 2701- 
2712), 

10, Use of pen registers and trap and trace devices in conformity with chapter 206 of 
title 1 8, United States Code (IS U$<C, 3 121 -3 1 27), or the Foreign Intelligence 
Surveillance Act (50 U,S.C. 1841-1846). 

1 1 , Electronic surveillance in conformity with chapter 1 1 9 of title 18, United States 
Code (IS U,S,C. 25 10-2522), the Foreign Intelligence Surveillance Act, or 
Executive Order 12333 § 2,5. 

12, Physical searches, including mail openings, in conformity with Rule 41 of the 
Federal Rules of Criminal Procedure, the Foreign Intelligence Surveillance Act, or 
Executive Order 12333 § 2,5. A classified directive provides additional limitation 
on certain searches, 

1 3, Acquisition of foreign intelligence information in conformity with title VII of the 
Foreign Intelligence Surveillance Act. 

B, SPECIAL REQUIREMENTS 

Beyond the limitations noted in the list above relating to particular investigative methods, 

the following requirements are to be observed: 

L Contacts with Represented Persons 

Contact with represented persons may implicate legal restrictions and affect the 
admissibility of resulting evidence. Hence, if an individual is known to be 
represented by counsel in a particular matter, the FB] will follow applicable law 
and Department procedure concerning contact with represented individuals in the 
absence of prior notice to counsel. The Special Agent in Charge and the United 
Stales Attorney or their designees shall consult periodically on applicable law and 
Department procedure. Where issues arise concerning the consistency of contacts 
with represented persons with applicable attorney conduct rules, the United States 
Attorney's Office should consult with Lhe Professional Responsibility Advisoiy 
Office. 
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2. Use of Classified I n vest igativc Technologies 

Inappropriate use of classified investigative technologies may risk the 
compromise of such technologies. Hence, in an investigation relating to activities 
in violation of federal criminal law that docs not concern a threat to the national 
security or foreign intelligence, the use of . such technologies must he in 
conformity with the Procedures for the Use of Classified Investigative 
Technologies in Criminal Cases. 

OTHERWISE ILLEGAL ACTIVITY 

1 . Otherwise illegal activity by an FBI agent or employee in an undercover operation 
relating to activity in violation of federal criminal law that does not concent a 
threat to the national security or foreign intelligence must be approved in 
conformity with the Attorney General's Guidelines on Federal Bureau of 
Investigation Undercover Operations. Approval of otherwise illegal activity in 
conformity with those guidelines is sufficient and satisfies any approval 
requirement that would otherwise apply under these Guidelines. 

2. Otherwise illegal activity by a human source must be approved in conformity wi th 
the Attorney General’s Guidelines Regarding the Use of FBT Confidential Human 
Sources. 

3. Otherwise illegal activity by an FBI agent or employee that is not within the scope 
of paragraph 1. must be approved by a United States Attorney’s Office or a 
Department of Justice Division, except that a Special Agent in Charge may 
authorize the following: 

a. otherwise illegal activity that would not be a felony under federal, state, 
local, or tribal law; 

b. consensual monitoring of communications, even if a c rime under state, 
local, or tribal law; 

c. the controlled purchase, receipt, delivery, or sale of drugs, stolen property , 
or other contraband; 

d. the payment of bribes; 

e. the making of False represent ations in concealment of personal identity or 
the true ownership of a proprietary; and 

f. conducting a money laundering transaction or transactions involving an 
aggregate amount not exceeding S 1 million. 
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However, in an investigation relating to a threat to the national security or foreign 
intelligence collection, a Special Agent in Charge may not authorize an activity 
that may constitute a violation of export control laws or laws that concern the 
proliferation of weapons of mass destruction. In such an investigation, a Special 
Agent in Chaige may authorize an activity that may otherwise violate prohibitions 
of material support to terrorism only in accordance with standards established by 
the Director of the FBI and agreed to by the Assistant Attorney General for 
National Security. 

4, The following activities may not be authorized: 
a. Acts of violence. 

b- Activities whose authorization is prohibited by law, including Unlawful 
investigative methods, such as illegal electronic surveillance or illegal 
searches. 

Subparagraph a,, however, does not limit the right of FBI agents or employees to 
engage in any lawful use of force, including the use of force in self-defense or 
defense of others or otherwise in the lawful discharge of their duties. 

5. An agent or employee may engage in otherwise illegal activity that could be 
authorized under this Subpart without the authorization required by paragraph 3, if 
necessary to meet an immediate threat to the safety of persons or property or to the 
national security, or to prevent the compromise of an investigation or the toss of a 
significant investigative opportunity. In such a case, prior to engaging in the 
otherwise illegal activity, every effort should be made by the agent or employee to 
consult with the Special Agent in Charge, and by the Special Agent in Charge to 
consult with the United States Attorney’s Office or appropriate Department of 
Justice Division where the authorization of that office or division would be 
required under paragraph 3., unless the circumstances preclude such consultation, 
Cases in which otherwise illegal activity occurs pursuant to this paragraph without 
the authorization required by paragraph 3. shall be reported as soon as possible to 
the Special Agent in Charge, and by the Special Agent in Charge to FBI 
Headquarters and to the United States Attorney's Office or appropriate 
Department of Justice Division. 

6- In an investigation relating ta a threat la the national security or foreign 

intelligence collection, the National Security Division Is the approving component 
for otherwise illegal activity for which paragraph 3. requires approval beyond 
internal FBI approval. However, officials in other components may approve 
otherwise illegal activity in such investigations as authorized by the Assistant 
Attorney General for National Security. 
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VL RETENTION AND SHARING OF INFORMATION 

A. RETENTI ON O F I N FO RMATION 

1 . The FBI shah retain records relating to activities under these Guidelines in 
accordance with a records retention plan approved by the National Archives and 
Records Adniinistration- 

2, The FBI shall maintain a database or records system that permits, with respect to 
each predicated investigation, the prompt retrieval of the status of the 

invest! garion (open or closed), the dales of opening and closing, and the basts for 
the investigation. 

B, INFORMATION SHARING GENERALLY 

1. Permit i vi- Sharing 

Consistent with law and with any applicable agreements or understandings with 
other agencies concerning the dissemination of information they have provided, 
the FBI may disseminate information obtained or produced through activities 
under these Guidelines: 

a. within the FB I and to other components o f the Department of Justice; 

b, to other federal, state, local, or tribal agencies if related to their 
responsibilities and, in relation to other Intelligence Community agencies, 
the determination whether the information is related to the recipient' s 
responsibi lilies may be left to the recipient; 

e, to congressional committees as authorized by the Department of Justice 
Office of Legislative Affairs, 

d to foreign agencies if the information is related to their responsibilities and 
the dissemination is consistent with the interests of the United States 
(including national security interests) and the FBI has considered the effect 
such dissemination may reasonably be expected to have on any identifiable 
United States person; 

e. if the information is publicly available, does not identify United States 
persons, or is disseminated with the consent of the person whom it 
concerns; 

f if the dissemination is necessary to protect the safety or security of persons 
or property, to protect against or prevent a crime or threat to the national 
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security, or to obtain in formation for the conduct of an authorized FBI 
investigation; or 

g. if dissemination of the information is otherwise permitted by the Privacy 

ActfS U.S.C. 552a), 

2. Required Sharing 

The FBI shall share and disseminate information as required by statutes, treaties. 
Executive Orders, Presidential directives. National Security Council directives, 
Homeland Security Council directives, and Attorney General -approved policies, 
memoranda of understanding, or agreements. 

INFORMATION RELATING TO CRIMINAL MATTERS 

1. Coordination with Prosecutors 

In an investigation relating to possible criminal activity in violation of federal law, 
the agent conducting the investigation shall maintain periodic written or oral 
contact with the appropriate federal prosecutor, as circumstances warrant and as 
requested by the prosecutor. When, during such an investigation, a matter appears 
arguably to warrant prosecution, the agent shall present the relevant facts to the 
appropriate federal prosecutor. Information on investigations that have been 
closed shall be available on request to a United Stales Attorney or his or her 
designee or an appropriate Department of Justice official, 

2. Criminal Matters Outside FBI Jurisdiction 

When credible information is received by an FBI field office concerning serious 
criminal activity not within the FBFs investigative jurisdiction, the field office 
shall promptly transmit the information or refer the complainant to a law 
enforcement agency having jurisdiction, except where disclosure would 
jeopardize an ongoing investigation, endanger the safety of an individual, disclose 
the identity of a human source, interfere with a human source's cooperation, or 
reveal legally privileged information, Tf full disclosure is not made for the reasons 
indicated, then, whenever feasible, the FBI field office shall make at least limited 
disclosure to a law enforcement agency or agencies having jurisdictioi^ and full 
disclosure shall he made as soon as the need for restricting disclosure is no longer 
present. Where full disclosure is not made to the appropriate law enforcement 
agencies within 1 SO days, the FBI field office shall promptly notify FBI 
Headquarters in writing of the facts and circumstances concerning the criminal 
activity. The FBI shall make periodic reports to the Deputy Attorney General on 
such nondisclosures and incomplete disclosures, in a form suitable to prated the 
identi ty of human sources. 
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3. Reporting of Criminal Activity 

a. When it appears that an FBI agent or employee has engaged in criminal 
activity in the comae of an investigation under these Guidelines, the FBI 
shall notify the United Stales Attorney's Office or an appropriate 
Department of Justice Division, When it appears that a human source has 
engaged in criminal activity in the course of an investigation under these 
Guidelines, die FBI shall proceed as provided in the Attorney General's 
Guidelines Regarding the Use of FBT Confidential Human Sources. When 
information concerning possible criminal activity by any other person 
appears in the course of an investigation under these Guidelines, the FBI 
shall initiate an investigation of the criminal activity if warranted, and 
shall proceed as provided in paragraph 1 . or 2, 

b, The reporting requirements under this paragraph relating to criminal 
activity by FBI agents or employees or human sources do not apply to 
otherwise illegal activity that is authorized in conformity with these 
Guidelines or other Attorney General guidelines or to minor traffic 
offenses. 

INFORMATION RELATING TO NATIONAL SECURITY AND FOREIGN 
INTELLIGENCE MATTERS 

The general principle reflected in current laws and policies is that there is a responsibility 
to provide information as consistently and fully as possible to agencies with relevant 
responsibilities to protect the United States and its people from terrorism and other threats 
to the national security, except as limited by specific constraints on such sharing. The 
FBFs responsibilities in this area include carrying out the requirements of the 
Memorandum of Understanding Between the Intelligence Community, Federal Law 
Enforcement Agencies, and the Department of Homeland Security Concerning 
Information Sharing (March 4, 2003), or any successor memorandum of understanding or 
agreement. Specific requirements also exist for internal coordination and consultation 
with other Departm ent of Justice components, and for provision of national security and 
foreign intelligence information to White House agencies, as provided in the ensuing 
paragraphs. 

1. Department of Justice 

a. The National Security Division shall have access to all inform alien 

obtained by the FBI through activities relating to threats to the national 
security or foreign intelligence. The Director of the FBT and the Assistant 
Attorney General for National Security shall consult concerning these 
activities whenever requested by either of them, and the FBI shall provide 
such reports and information concerning these activities as the Assistant 
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Attorney General for National Security may request. In addition to any 
reports or information the Assistant Attorney General for National 
Security may specially request under this subparagraph, the FBI shall 
provide annual reports to the National Security Division concerning its 
foreign intelligence collection program, including inform aiion concerning 
the scope and nature of foreign intelligence collection activities in each 
FBI field office, 

b. The FBI shall keep the National Security Division apprised of all 
information obtained through activities under these Guidelines that is 
necessary to the ability of the United States to investigate or protect 
against threats to die national security, which shall include regular 
consultations between the FBI and the National Security Division to 
exchange advice and information relevant to addressing such threats 
through criminal prosecution or other means. 

c. Subject to subparagraphs d. and e., relevant United States Attorneys’ 
Offices shall have access to and shall receive information from the FBI 
relating to threats to the national security, and may engage in consultations 
with the FBI relating to such threats, to the same extent as the National 
Security Division. The relevant United States Attorneys" Offices shall 
receive such access and information from the FBI field offices, 

d. In a counterintelligence investigation Le,, an investigation relating to a 
matter described in Part VU.S.2 of these Guidelines - the FBI's provision 
of information to and consultation with a United States Attorney’s Office 
are subject to authorization by the National Security Division. In 
consultation with the Executive Office for United States Attorneys and the 
FBI, the National Security Division shall establish policies setting forth 
circumstances in which the FBI will consult with the National Security 
Division prior to informing relevant United States Attorneys' Offices 
about such an investigation. The policies established by the National 
Security Division under this subparagraph shall (among other things) 
provide that: 

i the National Security Division will* within 30 days, authorize the 
FBI to share with the United States Attorneys' Offices information 
relating to certain espionage investigations, as defined by the 
policies, unless such information is withheld because of substantial 
national security considerations; and 

ii. the FBI may consult freely with United States Attorneys' Offices 
concerning investigations within the scope of this subparagraph 
during an emergency, so long as the National Security Division is 
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notified of such consultation as soon as practical after the 
consultation. 

e. Information shared with a United States Attorney's Office pursuant to 
subparagraph c. or d, shall be disclosed only to the United States Attorney 
or any Assistant United States Attorneys designated by Ihe United Slates 
Attorney as points of contact to receive such information. The United 
Slates Attorneys and designated Assistant United States Attorneys shall 
have appropriate security clearances and shall receive training in the 
handling of classified information and information derived from the 
Foreign Intelligence Surveillance Act* including training concerning the 
secure handling and storage of such information and training concerning 
requirements and limitations relating to the use, retention,, and 
dissemination of such information. 

f, The disclosure and sharing of information by the FBI under this paragraph 
is subject to any limitations required in orders issued by the Foreign 
Intelligence Surveillance Court, controls imposed by the originators of 
sensitive material and restrictions established by the Attorney General or 
the Deputy Attorney General in particular cases. The disclosure and 
sharing of information by the FBI under this paragraph that may disclose 
the identity of human sources is governed by the relevant provisions of the 
Attorney General's Guidelines Regarding the Use of FBI Confidential 
Human Sources. 

WbJle House 

In order to cany out their responsibilities, the President, the Vice President, the 
Assistant to the President for National Security Affairs* the Assistant to the 
President for Homeland Security Affairs, the National Security Council and its 
staff, the Homeland Security Council and its staff, and other White House 
officials and offices require information from all federal agencies, including 
foreign intelligence, and information relating to international terrorism and other 
threats to the national security. The FBI accordingly may disseminate to the 
White House foreign intelligence and national security information obtained 
through activities under these Guidelines* subject to the following standards and 
procedures.: 

a. Requests to the FBI for such information from the White House shall be 
made through the National Security Council staff dr Homeland Security 
Council staff including, but not limited to, the National Security Council 
Legal and Intelligence Directorates and Office of Combating Terrorism, 
or through the President’s Intelligence Advisory Board or the Counsel tq 
the President. 
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b- Compromising information concerning domestic officials or political 
organ izati ons, or information concerning activities of United Stales 
persons intended to affect the political process in the United States, may 
be disseminated to the White House only with the approval of ibe Attorney 
General, based on a determination that such dissemination is needed for 
foreign intelligence purposes, for the purpose of protecting against 
international terrorism or other threats to the national security, or for the 
conduct of foreign affairs. However, such approval is not required for 
dissemination to the White House of information concerning efforts of 
foreign intelligence services to penetrate the WTiile House, or concerning 
contacts by White Honsc personnel with foreign intelligence service 
personnel, 

c, Examples of types of information that arc suitable for dissemination to the 
White House on a routine basis include, but are not limited to- 

i. information concerning international terrorism, 

ii. information concerning activities of foreign intelligence services In 
the United States; 

iif information indicative of imminent hostilities involving any 
foreign power; 

iv, information concerning potential cyber threats to the United States 
or its allies; 

v, information indicative of policy positions adopted by foreign 
officials, governments, or powers, ot their reactions to United 
States foreign policy initiatives; 

vi, information relating to possible changes in leadership positions of 
foreign governments, parties, factions, or powers; 

vii, information concerning Foreign economic or foreign political 
matters that might have national security ramifications; and 

viii, information set forth in regularly published national intelligence 
requirements, 

d. Communications by the FBI to the White House that relate to a national 
security matter and concern a litigation issue for a specific pending case 
must be made known to the Office of the Attorney General, the Office of 
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the Deputy Attorney General, or the Office of the Associate Attorney 
General. White House policy may specially limit or prescribe the White 
House personnel who may request information concerning such issues 
from the FBI, 

e. The limitations on dissemination of information by the FBI to the White 
House under these Guidelines do not apply to dissemination to (he White 
House of information acquired in the course of an FBI investigation 
requested by the White House into the background of a potential employee 
or appointee, or responses to requests Grom the White House under 
Executive Order 10450. 

Special Statutory Requirements 

a. Dissemination of information acquired under the Foreign Intelligence 
Surveillance Act is* to the extent provided in that Act, subject to 
minimization procedures and other requirements specified in that Act, 

b. Information obtained through the use of National Security Letters under 1 5 
U.S-C, 1 681 v may be disseminated in conformity with the general 
standards of this Pan. Information obtained through the use of National 
Security Letters under other statutes may be disseminated in conformity 
with the general standards of this Part, subject to any applicable limitations 
in their governing statutory provisions r 12 US,C 34l4fa)(5XB}; 15 
U.S.C. Iti81u(f); 1BU.S.C. 2709(d); 50 US,C. 436(e). 
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VII. DEFINITIONS 

A. CONSENSUAL MONITORING : monitor] ng of communications for which a c ourt order 
or warrant is not legally required because of the consent of a party to the communication, 

B, EMPLOYEE: an FBI employee or an employee of another agency working under the 
direction and control of the FBI 

C FOR OR ON BEHALF QF A FOREIGN POWER: the determination that activities are 
for or on behalf of a foreign power shall be based on consideration of (he extent to which 
the foreign power is involved in: 

1 . control or policy direction; 

2. financial or material support; or 

3. leadership, assignments, or discipline. 

D, FOREIGN COMPUTER INTRUSION: (he use or attempted use of any cybcr-acti vrty or 
other means* by, for, or on behalf of a foreign power to scan, probe, or gain unauthorized 
access into one or more U.S.-based computers. 

E. FOREIGN INTELLIGENCE: information relating to the capabilities, intentions, or 
activities of foreign governments or elements thereof foreign organizations or foreign 
persons, or international terrorists, 

F, FOREIGN INTELLIGENCE REQUIREMENTS: 

L national intelligence requirements issued pursuant to authorisation by the Director 
of National Intelligence, including the National Intelligence Priorities Framework 
and the National HUMINT Collection Directives, or any successor directives 
thereto; 

2. requests to collect foreign intelligence by the President Or by Intelligence 
Community officials designated by the President; and 

3, directions to collect foreign intelligence by the Attorney General, the Deputy 
Attorney General, or an official designated by the Attorney General. 

G. FOREIGN POWER: 

L a foreign government or any component thereof, whether or not recognized by the 
United States: 
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2. a faction of a foreign nation or nations, not substantially composed of United 
States persons; 

3. an entity that is openly acknowledged by a foreign government or governments to 
be directed and controlled by such foreign government or governments; 

4. a group engaged in international terrorism or activities in preparation therefor,, 

5. a foreign-based political organization, not substantially composed of United States 
persons; or 

6. an entity that is directed or controlled by a foreign government or governments. 

H, HUMAN SOURCE; a Confidential Human Source as defined in the Attorney General* s 
Guidelines Regarding the Use of FBI Confidential Human Sources. 

I, INTELLIGENCE ACTIVITIES; any activity conducted for intelligence purposes or to 
affect political or governmental processes by, for, or on behal f of a foreign power, 

J. INTERNATIONAL TERRORISM; 

Activities that; 

1. involve violent acts or acts dangerous to human life that violate federal, state, 
local, or tribal criminal law or would violate such law if committed within the 
United States or a state, local, or tribal jurisdiction; 

2 . appear to be intended; 

i. to intim idate or coerce a civilian popul ation; 

ii. to influence the policy of a government by intimidation or coercion; or 

iii. to affect the conduct of a government by assassination or kidnapping; and 

3. occur totally outside the United States, or transcend national boundaries in terms 
of the means by which they are accomplished, the persons they appear to be 
intended to coerce or intimidate, or the locale In which their perpetrators operate 
Or seek asylum, 

K . PROPRIET ARY : a sole proprietorah ip, partnershi p, corporation, or other business enti ty 
operated on a commercial basis, which is owned, controlled, or operated wholly or in part 
on behalf of the FBI, and whose relationship with the FBI is concealed from third parties. 
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L. PUBLICLY AVAILABLE: information that has been published or broadcast for public 
consumption, is available on request to the public, is accessible on-line or otherwise to 
the public, is available to the public by subscription or purchase, could be seen or heard 
by any casual observer, is made available at a meeting open to the public, or is obtained 
by visiting any place or attending any event that js open to the public, 

M. RECORDS; any records, databases, files, indices, information systems, or other retained 
information, 

N. SENSITIVE INVESTIGATIVE MATTER; an investigative matter involving the 
activities of a domestic public official or political candidate (involving corruption or a 
threat to the national security % religious or political organization or individual prominent 
in such an organization, or news media, or any other matter which, in the judgment of the 
official authorizing an investigation, should be brought to the attention of FBI 
Headquarters and other Department of Justice officials, 

O. SENSITIVE MONITORING CIRCUMSTANCE: 

l investigation of a member of Congress, a federal judge, a member of the 

Executive Branch at Executive Level IV or above, or a person who has served in 
such capacity within the previous two years; 

2r investigation of the Governor, Lieutenant Governor, or Attorney General of any 

state or territory, or a judge or justice of the highest court of any state or territory, 
concerning an offense involving bribery, conflict of interest, or extortion related to 
the performance of official duties; 

3. a party to the communication is in the custody of the Bureau of Prisons or the 
United States Marshals Service or is being or has been afforded protection in Lhe 
Witness Security Program; or 

4. the Attorney General, the Deputy Attorney General or an Assistant Attorney 
General lias requested that the FBI obtain prior approval for the use of consensual 
monitoring in a specific investigation. 

P. SPECIAL AGENT IN CHARGE: the Special Agent in Charge of an FBI field office 
(including an Acting Special Agent in Charge), except that the functions authorized for 
Special Agents in Charge by these Guidelines may also be exercised by the Assistant 
Director in Charge or by any Special Agent in Charge designated by tlie Assistant 
Director in Charge in an FBI field office headed by an Assistant Director, and by FBI 
Headquarters officials designated by the Director of the FBI. 

Q. SPECIAL EVENTS MANAGEMENT : planning and conduct of public events or 
activities whose character may make them attractive targets for terrorist attack. 
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R. STATE, LOCAL, OR TRIBAL: any slate or territory of the United Stales or political 
subdivision thereof, the District of Columbia, or Indian tribe. 

S. THREAT TO THE NATIONAL SECURITY; 

L international terrorism; 

2. espionage and other intelligence activities, sabotage, and assassination, conducted 
by T for, or on behalf of foreign powers, organizations, or persons; 

3. foreign computer intrusion; and 

4. other matters determined by the Attorney General, consistent with Executive 
Order 12333 or a successor order. 

T. UNITED STATES: when used in a geographic sense, means all areas under the territorial 
sovereignty of the United Stales. 

U UNITED STATES PERSON: 

Any of the following, but not including any association or corporation that is a foreign 
power as defined in Subpart G. I .-.3.: 

\ . an individual who is a United States citizen or an alien law fully admitted for 
permanent residence; 

2. an unincorporated association substantially composed of individuals who are 
United States persons; or 

3^ a corporation incorporated in the United States. 

In applying paragraph 2., if a group or organization in the United States that is affiliated 
with a foreign-based international organization operates directly under the control of the 
international organization and has no independent program or activities in the United 
States, the membership of the entire international organization shall be considered in 
determining whether it is substantially composed of United States persons. however, 
the U.S.-based group or organization has programs or activities separate from, or in 
addition to, those directed by the international organization, only its membership in the 
United Slates shall be considered in determining whether it is substantially composed of 
United States persons. A classified directive provides further guidance concerning the 
determination of United States person status, 
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V. USE: when used with respect to human sources, means obtaining information from, 
tasking, or otherwise operating such sources. 


Date: 
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APPENDIX B: (U) EXECUTIVE ORDER 12333 
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EXECUTIVE ORDER 
13331 


LIMITED STATES INTELLIGENCE ACTIVITIES 
DECEMBER 4, 1981 

(AS AMENDED BY EXECUTIVE ORDERS 13284 {£003} t 13355 {2004) 
AND 13470 (200S ) \ 

PREAMBLE 

Timely, accurate, and insightful information about the 
activities, capabilities, plans, and intantiona of foreign 
powers, organizations, and persona, and their agents, is 
essential to the national security of the United States. All 
reasonable and lawful means must be used to ensure that the 
United States will receive the beat intelligence possible* For 
that purpose, by virtue of the authority Vested in me by the 
Constitution and the laws of the united States of America, 
including the National Security Act of 1'347, as amended, [Act) 
and as President of the United States or America, in order to 
provide for the effective conduct of United States intelligence 
activities and the protection of constitutional rights, it is 
hereby ordered as follows: 

PART 1 Goals, Directions, Duties, and Responsibilities t/ith 
Respect to United States Intelligence Efforts 

1 T 1 v?oaJs. The United States intelligence effort shall provide 
the President, the National Security Council, and the Homeland 
Security Council with the necessary information on which to base 
decisions concerning the development and conduct of foreign, 
defense, and economic polities, and the protection of 
United States national interests from foreign security threats. 
Ail departments and agencies shall cooperate fully to fulfill 
this goal . 

{a) All means, consistent with applicable- Federal law and 
this order, and with full consideration of the rights of 
United States persons, Shall be used to obtftlP reliable 
intelligence information to protect the United States and. its 
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|b) The United States Government has a solemn obligation, 
and shall continue in che conduct of intelligence activities 
under this order, to protect fully the legal rights of all 
United States persons, including freedoms*- civil liberties, and 
privacy rights guaranteed by Federal law, 

(c) Intelligence collection under this order should be 
guided by the need lor information to respond to intelligence 
priorities set by the. President. 

Id) Special emphasis should be given to detecting and 

countering; 

(If Espionage and other threats and activities 
directed by foreign powers or their 1 irtsi! igenc-e 
service.? against the United States and its interests,- 

(2) Threats to the United States and its interest* 
from terror ism; and 

(3) Threats to the United States and its interests 
CrOm the development,- pcsse-sa ion, ptol i feral ion , CU 
use of weapons of mass destruction. 

Le) Special emphasis shall be given to the product Lori 
of timely, accurate, arsd insightful reports;, responsive- to 
decisionmakers in the executive h ranch, chat draw on ail 
appropriate source? of information, including open source 
information, meet rigorous analytic standards, consider 
diverse analytic viewpoints, and accurately represent 
appropriate alternative Views. 

Cn State, local, and tribal governnwnts are CTitical 
partners in securing and defending the United States from 
terrorism and other threats to the United States and its 
interest?. Out national intelligence effort should take into 
account the responsibi 1 ities and requirements cd State, Joca), 
and tribal governments and, as appropriate, private sector 
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entities, when undertaking the collection and dissemi nation of 
information and intelligence to protect the United States. 

(g) All departments and agencies have a responsibility 
to prepare and to provide, Intelligence in a manner that allows 
the full and free exchange of information. Consistent With 
applicable law and presidential guidance* 

1 ,2 The National £ecuri ty Council, 

(a) P urpose. The National security Council *NSC) 
shall act as the highest ranking executive branch entity that 
provides support to the President for review of, guidance 
tor, and direction to the conduct of all foreign intelligence, 
counterintelligence, and covert action, and attendant policies 
and programs* 

<b) Covert Action and DtJwr Sensitive intelligence 
Operations* The NSC shall consider and submit to the President 
a policy reconupendat ion, including ali dissents, on each 
proposed covert action and conduct a periodic review of ongoing 
covert action activities, including an evaluation of the 
effectiveness and consistency With current national policy 
of such activities and consistency with applicable legal 
requirements. ThE MS-C shall perform such other functions 
related to covert action as the President may direct, but shall 
not undertake the conduct of covert actions. The NSC shall also 
review proposals for other sensitive intelligence operations. 

1*3 Director of National inteiligtonce* Subject to the 
authority, direction, and control nf the President, the Director 
of National Intelligence 4Di rector! shall serve as the head of 
the intelligence Community, act as the principal adviser to the 
President, to the NSC, and to the Homeland Security Council 
for intelligence matters related to national security, and 
shall oversee and direct the implementation of the National 
rntel I Igence Program and execution nf the National Intelligence 
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Program, budget* The Director will iead a unified, coordinated, 
and effective intelligence effort* in addition, the Director 
shall, in carrying out the duties and. responsibilities under 
thin section, take into account the views of the heads of 
departments containing an element of the Intelligence Community 
and of the Director Of the Central Intelligence Agency. 

(a^ Except as otherwise directed by the president, or 
prohibited by law, the Director shall have access to all 
information and intelligence 1 described in section l-5(al of this 
order. For the purpose of access to and sharing of information 
and intelligence, the Director: 

41) Is hereby assigned the function under 
section 3(5) of the Act, to determine that intelligence, 
regardless of the source from which derived and including 
information gathered within or outside the United States , 
pertains to (note than One United States Government agency; and 

42) Shall develop guidelines for how Information 

or intelligence is provided to or accessed by the Intelligence 
COKffnUfiity In accordance With section 1.5 fa) of this order, and 
for how the information or intelligence may he used and shared 
by the Intelligence Community* All guidelines developed in 
accordance with this section shall be approved by the Attorney 
General and, where applicable, shall he consistent with 
guidelines issued pursuant to section 1016 of the Intelligence 
Reform and Terrorism Protection Act of 2CQ4 (Public Law 10-0-450) 
[IRTFAJ . 

(b> in addition to fulfilling the obligations arid 
responsibilities prescribed by the Act, the Director: 

[lj Shall establish objectives, priorities, and 
guidance for the Intelligence Community to ensure timely and 
effective collection, processing, analysis, and dissemination of 
intelligence, of whatever nature and from whatever source 
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derived; 

[2) May designate, in consultation with affected 
heads of departments or Intelligence Ccaiununity elements, one or 
mors Intelligence Community elements to develop and to maintain 
service; of common concern on behalf of the Intelligence 
Community if the Director determines such services can be more 
efficiently or effectively accomplished in a consolidated 
manner; 

(3> Shall oversee and provide advice to the 
President and the NSC with respect to all ongoing and proposed 
cC-vart action programs; 

( 4 ) In regard to the establishment and conduct of 
intelligence arrangements and agreements with foreign 
governments and International organisations : 

(M May enter into intelligence and 
counterintelligence arrangements and agreements with foreign 
governments and international organizations; 

(B} Shall formulate policies concerning 
intelligence and counterintelligence arrangements and agreements 
with foreign governments and international organizations; and 

<C> Shall align and synchronize Intelligence and 
counter intelligence foreign relationships among the elements of 
the Intelligence Community to further United States rational 
security, policy, and intelligence objectives; 

150 Shall participate in the development of 
procedures approved by the Attorney General governing criminal 
drug intelligence activities abroad to ensure that these 
activities are consistent with foreign intelligence programs; 

(6) Shall establish common security and access 
standard-!?, for managing and handling Intelligence systems, 
information, and products, with special emphasis on 
facilitating: 
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{A) The fullest and most prompt access to and 
dissemination of Information and intelligence practicable, 
assigning the highest priority to detecting, preventing, 
preempting, and disrupting terrorist threats and activities 
against the United States, its interests, and allies; and 
(B1 The establishment of standards for an 
interoperable information sharing enterprise that facilitates 
the Sharing of intelligence information among elements of the 
Intelligence Community? 

Shall ensure that appropriate departments and 
agencies have access to intelligence and receive the support 
needed to perform independent analysis; 

(0} Shall protect,, and! ensure that programs are 

developed to protect, intelligence sources, methods, and, 

activities from unauthorized disclosure; 

( Shall, after consultation with the heads of 
affected departments and agencies, establish guidelines for 
Intelligence Community elements for: 

(A] classification and declassification of ell 
intelligence and intelligence-related information classified 
under the authority of the Director or the authority of the head 
□f a department or Intelligence Community element; and 
CBJ Access to and dissemination of all 
intelligence and intelligence-related information, both in lt9 
finaL form and in the form when initially gathered, to include 
intelligence originally classified by the head of a department 
or Intelligence Community element, except that access to and 
dissemination of information concerning United States persons 
shall bo governed by procedures developed in accordance with 
Part 2 of this order; 

<2GJ Hay, only with respect to Intelligence 
Community elements, and after consultation with the head of the 
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originating Intelligence Community element or the head of the 
originating department, declassify, or direct the 
declassification of, information or intelligence relating to 
intelligence sources, methods, and activities. TJle Director may 
only delegate this authority to the Principal Deputy Director of 
National Intelligence; 

(lit May establish, operate, and direct one or more 
national intelligence centers to address intelligence 
priorities ; 

(12} May establish Functional Managers and Mission 
Managers, and designate officers or employees of the 
United States to serve in these positions. 

(A} Functional Managers shall report to the 
Director concerning the execution of their duties as Functional 
Managers, and may be charged with developing and implementing 
strategic guidance, policies, and procedures for activities 
related to a specific intelligence disc ip line or set of 
intelligence activities; set training and tradecraft standards; 
and ensure coordination within and across intelligence 
disciplines and Intelligence Community elements and uith related 
non-intelligence activities. Functional Managers may also 
advise the Pi rector cm t the management of resources; policies 
and procedures; collection capabilities and gaps; processing and 
disseminat ion of intelligence; technical architectures; and 
other issues or activities determined by the Director. 

£il The Director of the National 
Security Agency is designated the Functional Manager for signals 
irvtolligante; 

tiiS The Director of the Central 
Intelligence Agency is designated the Functional Manager for 
human intelligence; and 

£iii} The Director Of the National 
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Geospatial-Intelliqen.ee Agency is designated the Functional 
Manager for geospatial intelligence, 

[ft) Mission Managers shall serve as principal 
substantive advisors on all Dr specified aspects of intelligence 
related to designated countries, regions* topics* or functional 
issues; 

(13) Shall establish uniform Criteria for the 
determination of relative priorities for the transmission of 
Critical foreign intelligence, and advise the Secretary of 
Defense concerning the communi cat ions requirements of the 
Intelligence Conanunity for the transmission of such 
communi cat ions? 

(14) Shall have ultimate responsibility for 
production and dis semi nat ion of intelligence produced by the 
intelligence Community end authority to levy analytic tasks on 
intelligence production organizations within the Intelligence 
Community* in consultation with the heads of the Intelligence 
Community elements concerned; 

(15) May establish advisory groups for the purpose 
of obtaining advice from within the intelligence Community to 
carry out the Director '9 responsibilities,, to include 
Intelligence Community executive management committees composed 
of senior Intelligence Community leaders. Advisory groups shall 
consist of representatives from elements of the Intelligence 
Community* aa designated by the Director, or other executive 
branch departments, agencies, and of rices, as appropriate; 

(.16} Shall ensure the timely exploitation and 
dissemination of data gathered by national Intelligence 
collection means, and ensure that the resulting intelligence is 
disseminated immediately to appropriate government elements, 
Including military commands; 

{17) Shall determine requirements and priorities 
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for* and, manage and direct the tasking, collection, analysis, 
produci-ion, and dissemination of, national intelligence by 
■elements of the Intelligence Community, including approving 
requirements for collection and analysis and resolving conflicts 
in collection requirements and in the tasking of national 
collection assets of Intelligence Community elements (except 
when otherwise directed by the President or when the Secretary 
of Defense exercises collection tasking authority under plans 
and arrangements approved by the Secretary of Defense and the 
Director \ i 

(10) pcay provide advisory tasking concerning 
collection and analysis of information or intelligence relevant 
to national Intelligence or national security to departments, 
agencies, and establishments of the United States Government 
that are not elements of the Intelligence Community? and shall 
establish 

procedures, in consultation with affected heads of 
departments or agencies and subject to approval by the Attorney 
General, to implement this authority and to monitor or evaluate 
the responsiveness of United States Government departments, 
agencies, and other establishments: 

(19) Shall fulfill the responsibilities in 
section 1.3 [b 3 (173 and |1B) of this order, consistent with 
applicable law and, with full consideration of the rights of 
□nitEd States persons, whether information is to he collected 
inside or outside the United states; 

(203 Shall ensure, through appropriate policies and 
procedures, the deeonflic.tion, coo rdi nation, and integration of 
all intelligence activities conducted by an intelligence 
Community element or funded by thE National Intelligence 
Program. In accordance with those policies and procedures: 

(A> The Director of the Federal Bureau of 

9 

B I D Vbikfi Dnlfld: 

UNCLASSIFIED -FOR OFFICII USE QNI.V oactott T5, pnt 



LWCLASgtFIFD - FOR PFFItWJL UM ONLV 
DontKlK srvHas’ijaijcni arc Ounsescm UlMa 

Investigation shall Coordinate the clandestine collection of 
foreign, intelligence collected through human sources or through 
human-enabled means and counterintelligence activities inside 
the United States; 

IB) The Director of the Central intelligence 
Agency shall coordinate the clandestine collection of foreign 
intelligence collected through human sources or through human- 
enabled means and counter Intel 1 iqence activities outside the 
United States; 

{€) ft.Il policies and procedures for the 
coordination of counterintelligence activities and the 
clandestine Collection of foreign intelligence inside the 
United States shall be subject to the approval of the Attorney 
General; and 

[QJ All policies and procedures developed under 
this section shall be coordinated with the heads of affected 
departments and Intelligence Community elements; 

(21] Shall , with the concurrence of the heads of 
affected departments and agencies, establish joint procedures to 
dfteonf lict, coordinate., and synchronise intelligence activities 
conducted by an intelligence- community element or funded by the 
National Intelligence Program, with intelligence activities, 
activities that involve foreign intelligence and security 
services, or activities that involve the use of clandestine 
methods. Conducted by other United States Government 
departments, agencies, and establishments; 

( 22 } Shall, In coordination with the heads of 
departments containing elements of the intelligence Community, 
develop procedures to govern major system acquisitions funded in 
whole Or in majority part by the National Intelligence Program,; 

(23J Shall see* advice from the Secretary of State 
to ensure that the foreign policy implications of proposed 
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intelligence activities are considered, and shall ensure, 
through appropriate policies and procedures# that intelligence 
activities are conducted in a manner consistent with the 
responsibilities pursuant to law and presidential direction of 
Chleis of United States Missions; and 

(24) Shall facilitate the use of Intelligence 
Community products by the Congress in a secure manner. 

(c> The Director's exercise of authorities in the 
Act and this order shall not abrogate the Statutory Or 
other responsibilities of the heads of departments of the 
United States Government or the Director of the Central 
intelligence Agency. Directives issued and actions taxer. by 
the Director in the exercise of the Director’s authorities 
and responsibilities to integrate, coordinate, and crake the 
Intelligence Community more effective in providing Intelligence 
related to national security shall be implemented hy the 
elements of the Intelligence Community, provided that any 
department head whose department contains an element of the 
Intelligence Community ar| d who believes that a directive or 
action of the Director Violates the requirements Of section 1Q1B 
of the IRTFA or this subsection shall bring the issue to the 
attention of the Director, the NSC, or the President for 
resolution in a manner that respects and does not abrogate the 
statutory responsibilities of the heads of the departments, 

(d) Appointments to certain positions. 

Cl] The relevant department or bureau head shall 
provide recommendations and obtain the concurrence of the 
Director for the selection of: the Director of the National 
Sacurity Agency, the Director of the National Reconnaissance 
Office, the Director of the National Geospatial- Intelligence 
Agency, the Under Se-Cretdry of Homeland Security lot 
Intelligence and Analysis, the Assistant Secretary of State for 
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Intelligence and Research, the Director of the Office of 
Intelligence and Counterintelligence of the Department of 
Energy, the Assistant Secretary for Intelligence and Analysis of 
the Department of the Treasury, and the Executive Assistant 
Director for the National Security Branch of the Federal Bureau 
of investigation* If the Director does not concur in the 
recoriKnendation, the department head may not fill the vacancy or 
make the recommendation to the President, as the case may be. 

If the department head and the Director do not reach an 
agreement on the selection or recoiwi«ndatLon f the Director and 
the department head concerned may advise the President directly 
of the Directors intention to withhold concurrence. 

(2J The relevant department head shall consult with 
the Director before appointing an individual to fill a vacancy 
or recommending to the President an individual be nominated to 
fill a vacancy in any of the following positions; the Under 
Secretary Of Defense for Intelligence# the Director of the 
Defense Intelligence Agency# uniformed heads of the intelligence 
elements of the Army, the Navy, the Air Force, and the Marine 
Corps above the rank of Major General or Roar Admiral# the 
Assistant Commandant of the toast Guard for Intelligence; and 
the Assistant Attorney General for National Security. 

(ei Removal from certain positions, 

(lj Except for the Director of the Central 
Intelligence Agency, whose removal the Director may recommend to 
the President, the Director and the relevant department head 
Shall consult On the removal, or recommendation to the President 
for removal, as the ease may be, of; the Director of the 
National Security Agency, the Director of the National 
Geospatial-intelligence Agency, the Director of the Defense 
Intelligence Agency, the Under Secretary of Homeland Security 
for Intelligence and Analysis, the Assistant Secretary o£ State 
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for Intelligence and Research, and the Assistant Secretary for 
Intelligence and Analysis of the Department of the Treasury. If 
the Director and the department heed do not agree on removal,! or 
recommendation for removal, either may make a recommendation to 
the President for the removal of the individual, 

(2} The Director and the relevant department or 
bureau head shall consult on the removal of: the Executive 
Assistant director for the national security Branch of the 
Federal Bureau of Investigation, the Director of the Office of 
intelligence and Counter intelligence of the Department of 
Energy, the Director of the National Reconnaissance Office, 
th# Assistant Commandant uf the Coast Guard for Intelligence, 
and the Under Secretary of Defense Cor intelligence. With 
respect ta an individual appointed by a department head, the 
department head may remove the individual upon the request of 
the Director; if the department head chooses not to remove the 
individual, either the Director or the department head may 
advise the President of th* department head's intention to 
retain the individual. In the case of the Under Secretary of 
Defense Cor Intelligence, the Secretory of Defense may recommend 
to the President either the removal or the retention of the 
individual. For uniformed heads of the intelligence elements of 
the Army, the Navy, the Air Force, and the Marine Corps, the 
Director may make a recommendation for removal to the Secretary 
of Defense, 

£3} Nothing in this subsection shall be construed 
to limit or ■otherwise' affect the authority of the President to 
nominate, appoint, assign, or terminate the appointment or 
assignment of any individual, with or without a consultation, 
recommendation* or concur Fence - 

1.3 The Intelligence Comsiun x ty „ Consistent with applicable 
Federal law and with the other provisions of this order, and 
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under the leadership of the Di rector, a:? specified in such law 
and this order, the Intelligence Community shell: 

^a} Collect and provide information needed by Che 
President and, in the performance of executive functions, the 
Vice President, the NSC, the Homeland Security Council, the 
Chairman of the Joint Chiefs of Staff, senior military 
commanders, and other eitecutive branch officials and, as 
appropriate, the Congress of the United States; 

4b J In accordance with priorities set by the President, 
collect information concerning, and conduct activities to 
protect against, international terrorism, proliferation of 
weapons of mass destruction, intelligence activities directed 
against the United States, international criminal drug 
activities, and other hostile activities directed against the 
United St a teg by foreign powers, organ i tat ions, persons, and 
their agents; 

(cj Analyte, produce, and disseminate intelligence; 

{a 3 Conduct administrative, technical, and other support 
activities within the United States and abroad necessary for 
the performance of authorised activities, to Include providing 
services of common concern for the Intelligence Community as 
designated by the Director in accordance with this order; 

4 eJ Conduct research, development, and procurement of 
technical Systems and devices relating to authorised functions 
and missions or the provision of services of common concern for 
the Intelligence Coranunlty; 

If 3 Protect the security of intelligence related 
activities, information, installations, property, and employees 
by appropriate means, including such investigations of 
applicants, employees, contractors, and other persons with 
similar associations with the Intelligence Community elements as 
are necessary; 
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[g] Take into account State, local, and tribal 
governments' and, as appropriate, private sector entities' 
information needs relating to national and Horne land security* 

(h) Deconflict, coordinate, and integrate all intelligence 
activities and other Information gathering in accordance with 
section 1 . 3 th) (20) of this order; and 

£i) Perform such other functions and duties related to 
intelligence activities as the President may direct. 

1.5 duties and Kejspansibj li ties of the Heads of Executive 
Branch Departments and Agencies* The heads of all departments 
and agencies shall: 

[a] Provide the [Director access tp all information and 
intelligence relevant to the national security or that otherwise 
ig required for the performance of the director's duties, 
to include administrative and other appropriate management 
information, except such information excluded by law, by the 
President, or by the Attorney General acting under this order 
at the direction of the President* 

(bi Provide ail programmatic and budgetary information 
necessary to support the Director in developing the National 
Intelligence Program; 

(c> Coordinate development and implementation of 
intelligence systems and architectures and, as appropriate, 
operational systems and architectures of their departments, 
agencies, and other elements with the Director to respond 
to national intelligence requirements and all applicable 
information sharing and security guidelines, information 
privacy, and other legal requirements? 

(dj Provide, to the maximum extent permitted hy 
law, subject to the availability of appropriations and not 
inconsistent with the mission of the department or agency, such 
further support to the Director as the Director may request, 
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after COJ1 Sul tit ion with the head Of the department or agency, 
for the performance of the Director’s functions; 

Respond to advisory tasking from the Director 
under section l.3(bH19t of this order to the greatest extent 
possible, Ln accordance with applicable policies established 
by the head of the responding department or agency; 

(fj Ensure that all elements within the department 
or agency comply with the provisions of Part Z of this order, 
regardless of Intelligence Community affiliation, when 
£■55 rfOrfifti.fi 9 foreign intelligence and counterintelligence 
functions; 

(g) Detonflict, coordinate, and integrate all 
intelligence activities in accordance with section l,3;bH20l* 
and intelligence and nther activities in accordance with 
section l.,3L(bj{2lj of this order: 

(h) Inform the Attorney General, either directly or 
through the Federal Bureau of Investigation, and the Director 
of clandestine collection of foreign intelligence end 
counterintelligence activities inside the United States not 
coordinated with the Federal Bureau of Investigation; 

ji) Pursuant to arrangements developed by the head of 
the department or agency and the Director of the Central 
Intelligence Agency end approved by the 01 lector, inform the 
Director and the Director of the Central Intelligence Agency, 
either directly or through hla designee serving outside the 
United States, as appropriate, of clandestine collection of 
foreign intelligence collected through human sources or through 
human-enabled means outside the United States that has not been 
coordinated with the Central Intelligence Agency; and 

US inform the Secretary of Defense, either directly or 
through hia designee, as appropriate, of clandestine collection 
of foreign intelligence outaide the United States in a region of 


If 

HI 

UKQtASeinSP - FUR OFFICIAL use ONLY 


VnoJijn QbIwJ 
□mtw IS, Mit 


UNCLASSIFIED - FOR OFFICIAL USE 
Domiint Invesbgmcra and Dp*rff1 Jam Bud* 

combat or contingency military operations designated by the 
Secretary of Defense, for purposes of this paragraph, after 
consultation with the Director of National Intelligence. 

1.6 Heads of Elements d£ the Jrttell iqenoe Common i ty - The head? 
Of elements of the Intelligence Community shall s 

\a) Provide the Director access to all Information and 
intelligence relevant to the national security ar that otherwise 
is required for the performance of the Director's duties, 
to include administrative and other appropriate management 
information, except such information excluded by law, by the 
President, or by the Attorney General acting under this order 
at the direct Lon of the President; 

LbJ Report to the Attorney General possible violations 
of Federal criminal laws by employees and of specified Federal 
criminal laws by any other person as provided in procedures 
agreed upon by tha Attorney General and the head of the 
department, agency, or establishment concerned, in a manner 
consistent with the protection of intelligence sources and 
methods, as specified in those procedures; 

fcl Report to the Intelligence Oversight Board, consistent 
With Executive Order 11462 nf February J9 r 200B, and provide 
copies of all such reports to the Director, concerning any 
Intelligence activities of their elements that they have reason 
to believe may be unlawful or contrary to executive order or 
presidential directive; 

(dl Protect intelligence and intelligence sources, 
methods, and activities from unauthorized disclosure in 
accordance with guidance from the Director; 

(ej Facilitate, as appropriate, the sharing of information 
or intelligence, as directed by law or the President, to State, 
Local, tribal, and private sector entities; 

(£> Disseminate information or intelligence to foreign 
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governments and international organizations under intelligence 
or counterintelligence arrangements or agreements established id 
accordance with section 1.3(b) < 4 h of this order; 

(gl Participate in the development of procedures approved 
by the Attorney General governing production and dissemination 
of information or intelligence resulting from criminal drug 
intelligence activities abroad if they have intelligence 
responsibilities far foreign or domestic criminal drug 
production and trafficking; and 

(h|i Ensure that the inspectors general, general counsels, 
and agency officials responsible for privacy or Civil liberties 
protection for their respective organizations have access tc any 
information or intelligence necessary to perform their Official 
duties. 

1.7 Intelligence Community Elements. Each element of 
the intelligence Community shall have the duties and 
responsibilities specified below, in addition to those 
specified by law or elsewhere in this order. Intelligence 
Community elements within executive departments shall serve the 
information and intelligence needs of their respective heads 
of departments and also shall operate as part of an integrated 
Intelligence Community, as provided in law or this order. 

[a] THE CENTRAL INTELLIGENCE AGEKCV. The Director of the 
Central Intelligence Agency shall: 

{t| Collect (including through clandestine means), 
analyze, produce, and disseminate foreign intelligence and 
counterintelligence; 

(2) Conduct counterintelligence activities without 
assuming or performing any internal security functions within 
the [Juiced States; 

(3) Conduct administrative and technical support 
activities within and outside the United States as necessary for 
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covet and proprietary arrangements; 

14) Conduct; covert action activities approved by tbe 
President, No agency except tbs Central Intelligence Agency (or 
the Armed Forces of the United States in tj ,n*r- of war declared by 
the Congress or during any period covered by a report from the 
F resident to the Congress consistent with the War Powers 
Resolution, Public Law 93- 148 J may conduct any covert action 
activity unless the President determines that another agency is 
more likely to achieve a particular objective; 

(51 Conduct foreign intelligence liaison 
relationships with intelligence or security services of foreign 
government a or international organizations consistent with 
section 1.3(b) £4} of this order; 

(fj i Under the direction and guidance of the Director, 
and in accordance with section 1.3(b) (4> of this order, 
coordinate the Implementation of intelligence and 
counterintelligence relationships between elements of the 
Intelligence Community and the intelligence Or security services 
of foreign governments or international organizations; and 

( 7 ) Perform such other functions and duties related 

to intelligence as the Director may direct, 

(bt THE DEFENSE INTELLIGENCE AGENCY The Director of the 
Defense Intelligence Agency shall ; 

(1) Collect [including through clandestine means [, 
analyze, produce, and disseminate foreign intelligence and 
counterintelligence to support national and departmental 

mi SSionS; 

(2) Collect, analyze, produce^ or, through tasking 
and coordination, provide defense and defense-related 
intelligence for the Secretary of Defense, the Chairman of the 
Joint Chiefs of Staff, combatant commanders , other Defense 
components, and non -Defense agencies; 
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(3) Conduct counterintelligence activities; 

{A) Conduct administrative and technical support 
activities within and out aide the United States as necessary for 
cover and proprietary arrangements; 

(5) Conduct, foreign defense intelligence liaison 
relationships and defense intelligence exchange programs with 
foreign defense establishments, intelligence or security 
services of foreign governments, and International organisations 
in accordance with sections 1.3{h}|4) r 1.7(aH6)j- and 1.10(1} oi 
this order; 

(6) Manage and coordinate all matters related to the 
Defense Attache system; and 

(7) Provide foreign intelligence and 
counterintelligence staff support as directed by the Secretary 
of Defense. 

(CJ THE NATIONAL SECURITY AGENCY. The Director of the 
National Security Agency shall: 

( 1 1 Collect (including through clandestine means} r 
process, analyze, produce, and disseminate signals intelligence 
information and data for foreign intelligence and 
Counterintelligence purposes to support national and 
departmental missions; 

(2} Establish and operate an effective unified 
organization for signals intelligence activities, except for the 
delegation of operational control over certain operations that 
are conducted through other elements of the intelligent* 
Community, Mo other department or agency may engage in signals 
intelligence activities except pursuant to a delegation by the 
Secretary of Defense, after coordination with the Director; 

( 3 \ Control signals intelligence collection and 
processing activities, including assignment of resources to an 
appropriate agent for such periods and tasks as required for the 
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direct gypport of military commanders; 

Hi Conduct administrative and technical support 
activities within and outbid# th# United States as necessary for 
cover a rraogement a ; 

15) Provide signals intelligence support for national 
and departmental requirements and for the conduct of military 
operations* 

16) Act as the National Manager for National Security 
Systems as established in law and policy , and in this capacity 
be responsible to the Secretary of Defense and to the Director; 

(7) Prescribe , consistent with section 102A(g) of 
the Act, within its field of authorized operations, security 
regulations covering operating practices, including the 
transmission, handling, and distribution of signals intelligence 
and commun i ca t i on e security material within and among the 
elements under control of the director of the National Security 
Agency, and exercise the necessary supervisory control to ensure 
compliance with the regulations; and 

10) Conduct foreign cryptologic liaison relationships 
in accordance with sections l.SfbJH), I.)(aH6), and l.lOfi} of 
this order. 

(d ) THE NATIONAL RECONNAISSANCE OFFICE. The Director of 
the National Reconnaissance Office shell; 

(!) Bfi responsible for research and development , 
acquisition, launch, deployment, and operation of overhead 
systems and. related data processing facilities to collect 
intelligence and information to support national and 
departmental missions and other United States Government needs; 
and 

{2J Conduct foreign liaison relationships relating 
to the above missions, in accordance with sections l,3(b>(41r 
1,7 (a) (6|, and i„10(i> of this order. 
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(«) THE NATIONAL GEOSPATIAL- INTELLIGENCE AGENCY, The 
Director of the National Geospatial- Intelligence Agency shall: 

(I) Collect, process, analyre, produce, and 
disseminate geospatial intelligence information and data for 
foreign intelligence and counterintelligence purposes to support 
national and departmental miss lone; 

12) Provide geospatial intelligence support for 
national and departmental requirements end for the conduct of 
military operations; 

£3) conduct administrative and technical support 
activities Mi thin and outside the United States as necessary for 
cover arrangement sr and 

£4] Conduct foreign geospatial intelligence liaison 
relationships, in accordarte* with sections l*3(b)H), 1.7(a) [£}, 
and l,10(i) of this order, 

(f) THE INTELLIGENCE AND COUNTER INTELLIGENCE ELEMENTS OF 
THE ARMY, 11AVY, AIR FORCE, AND MARINE CORPS, The Commanders and 
heads Of the intelligence and counterintelligence elements of 
the Army, Navy, Air Force, and Marine Corps shall: 

(1) Collect (including through clandestine means), 
produce, analyze, and disseminate defense and defense -re la ted 
intelligence and counterintelligence to support departmental 
requirements > and, as appropriate, national requirements; 

£2} Conduct counterintelligence activities; 

(3> Monitor the development, procurement, and 
management of tactical intelligence- systems and equipment and 
conduct related research, development, and teat and evaluation 
activities; and 

£4} Conduct military intelligence liaison 
relationships and military intelligence exchange programs with 
selected cooperative foreign defense establishments and 
international organizations in accordance with 
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sections 1, 3(b)(4)* 1.7(a)(6|» and 1.10(1) of this order. 

fgl INTELLIGENCE ELEMENTS 0 P THE FEDERAL BUREAU OF 
INVESTIGATION. Under the supervision of the Attorney General 
and pursuant to such regulations as the Attorney General may 
establish, the intelligence elements of the Federal Bureau of 
investigation shall? 

[lj Collect [including through clandestine means} , 
analyze, produce, and disseminate foreign intelligence and 
counterintelligence to support national and departmental 
missions, in accordance with procedural guidelines approved by 
the Attorney General, after consultation with the Director? 

[3] Conduct court tar intelligence activities? and 

[3) Conduct foreign intelligence and 
counterintelligence liaison relationships with intelligence, 
security, end lew enforcement services of foreign governments or 
international organizations in accordance with 

sections 1< 3(b)(4) and 1.7(a) ffi] of this order. 

(hi THE INTELLIGENCE AND COUNTER INTELLIGENCE ELEMENTS OF 
THE COAST GUARD. The Commandant of the Coast Guard shall i 

{11 Collect [including through clandestine means), 
analyze, produce, and disseminate foreign intelligence and 
counterintelligence including defense and defense-related 
information and intelligence tn support national and 
departmental missions? 

[2) Conduct counterintelligence activities; 

t3) Monitor the development, procurement r arid 
management of tactical intelligence systems and equipment and 
conduct related research, development, and test and evaluation 
activities; and 

[4) Conduct foreign intelligence liaison 
relationships and intelligence exchange programs with foreign 
intelligence services, security services or international 
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urgjniiSl i ons in accordance with sections 1.3(b) (4), l.l(a((6), 
and,,, when operating 4s part of the Depar tenant of Defense# 

1. 10 fit of this order. 

U) THE EUREAU OF INTELLIGENCE AND RESEARCH# DEPARTMENT OF 
STATE; THE OFFICE OF INTELLIGENCE AND ANALYSIS , DEPARTMENT OF 
THE TREASURY? THE OFFICE OF NATIONAL SECURITY INTELLIGENCE# DRUG 
ENFORCEMENT ADMINISTRATION; THE OFFICE OF INTELLIGENCE AND 
ANALYSIS, DEPARTMENT OF HOMELAND SECURITY; AND THE OFFICE OF 
INTELLIGENCE AMD COUNTERINTELLIGENCE, DEPARTMENT OF ENERGY. 

The he&d& of the iureau of Intelligence and Research# Department 
□f State? the Office of Intelligence and Analysis# Department 
of the Treasury; the Office of National Security intelligence# 
Drug Enforcement Administration; the Office of Intelligence and 
Analysis# Department of Horaeland Security; and the Office of 
Intelligence and Counterintelligence, Department of Energy 
Shall ; 

(L> Collect (overtly or through publicly available 
sources), analyze, produce, and disseminate information, 
intelligence, and counterintelligence to support national and 
departmental missions; and 

Conduct and participate in analytic or 
information exchanges with foreign partners and international 
organisations in accordance with sections 1.31b) (4( and 
1.7(a) (fi) of this orders 

(j) THE OFFICE OF THE DIRECTOR OF NATIONAL INTELLIGENCE. 
The Director shall collect (overtly ex through publicly 
available aouecea) # analyse, produce# and disseminate 
ifi format ion, intelligence, and counter-intelligence to support 
the missions of the Office of the Director of National 
Intelligence, including the National Counterterrorism Center, 
and to support other national missions,, 

1.8 The Department of ^tate, in addition to the authorities 
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e-jterCiied by the Bureau of Intelligence and Research under 
sections 1-4 and 1,7 [i) oC this ureter, the Secretary of State 
shall : 

■Is) Collect [Overt ly or through publicly available 
sources) information relevant to United States foreign policy 
And national security concerns; 

)b) Disseminate., to the man-mum extent possible, reports 
received from United States diplomatic and consular posts; 

ic) Transmit reporting requirements end advisory taskings 
Of the Intelligence Community to the Chiefs of United States 
Missions abroad; and 

Id) Support Chiefs of United States Missions in 
discharging their respoos ibi il t isrS pursuant to la* and 
pres iden t i a 1 di rec t ion L 

1,^ The Department of the Treasury. In addition to the 
authorities exercised by the Office of Intelligence and Analysis 
of the Department Of the Treasury under sections 1.4 and 1.7 (i) 
of this order the Secretary of the Treasury shall collect 
(overtly or through publicly available sources! foreign 
financial information and, in consultation with the Department 
Of State, foreign economic information, 

1.1D J7?e Department of defense. The Secretary of Defense 
shat l : 

)a) collect [including through clandestine means I , 
analyze, produce, and disseminate information and intel Ligence 
and be responsive to col Lection tasking and advisory tasking by 
the Director; 

l b) Collect | including through clandestine means), 
analyze, produce, and disseminate defense and defense-related 
intelligence and counterintelligence, as required for execution 
of the Secretary's responsibilities; 

l c) Conduct programs and missions necessary to fulfill 
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national, departmental, And t Attica I intelligence requirements; 

id) Conduct counter i n te 14- i gence activities in support 
o£ Department of Defense components and coordinate 
counterintelligence activities in accordance with 
section 1.3(b) (20 Ji and (21) cf this order; 

i#) Act, in Coordination with the Director, as the 
executive agent of the United States Government for signals 
intelligence activities? 

(f) Provide for the timely transmission of critical 
intelligence, as defined by the Director, within the 
United States Government; 

(g) Carry oat or Contract for research, development, 
and procurement of technical systems and devices relating to 
authorized intelligence functions; 

(h) Protect the security of Department of Defense 
installations, activities, information, property, and 
employees by appropriate means, including such investigations 
□f applicants, employees, contractors, and other persons with 
similar associations with the Department of Defense as ore 
necessary; 

(i) Establish and maintain defense intelligence 
relationships and defense intelligence exchange programs 
With selected cooperative foreign defense establishments, 
intelligence or security services of foreign governments, and 
international organizations, and ensure that such relationships 
and programs are in accordance with sections 1+3 (b) (4), 

l + 3(bj (21) and 1.7[a]($( of this order; 

{j) Conduct such administrative and technical support 
activities within and outside the United States as are necessary 
to provide for cover and proprietary arrangements, t-0 perform 
the functions described in sections (a) though £i) above, and to 
support the Intelligence Community elements of the Department of 
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ckl Use the Intel licence Community elements within the 
.Department of Defense identified in section 1.7(b) through ■! f J 
and., wh*n the Coast Guard is operating as fiat' ol the Department 
of Defense, 

(h> above to carry out the Secretary of Defense's 
re 3 pon 5 ibil 1 tl.es assigned in this section or other departments, 
agencies, or offices within the Department of Defense, as 
appropriate, to conduct the intelligence missions and 
responsibilities assigned to the Secretary of Oe-lenSB . 

1 r 1 1 The Depart.7 lent or" Homeland Hecurity. In addition to the 
authorities exercised by the Office of Intelligence and Analysis 
Of the Department Of Homeland Security under sections 1 . and 
I * 7 < i. > of this order, the Secretary of Homeland Security shall 
conduct, through t be United States Secret Service, activities to 
determine the existence and capability of surveillance equipment 
being used against the President or the vice President of the 
United States, the Executive Office of the President, and, 
as authorized by the Secretary of Homeland Security Or the 
President, other Eecret Service protectees and United States 
■officials. No information shall be acquired intentionally 
through SOCb activities eKCep r to protect against- use rf s-.JCb 
surveillance equipment, and those activities shall be conducted 
pursuant to procedures agreed upon by the Secretary of Homeland 
Security and the Attorney General. 

1,12 The Department of Energy, In addition to the authorities 
exercised by the Office of Intelligence and Counterintelligence 
of the Department ot Energy under sections 1,4 and 1-7 [ i 1 of 
this order, the Secretary of Energy shall: 

(a) Provide expert scientific; technical, analytic, and 
research capabilities to other agencies within the intelligence 
COmmun i t y , as approp n a t e ; 
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(b) Participate in formulating intelligence collection and 
analysis requirements where the special espert capability of the 
Department can contrihutej and 

(cS Participate with the Department of State in overt iy 
collecting Information with respect to foreign energy matters. 

1.13 The Federal bureau of Investigation. In addition to the 
authorities exercised by the intelligence elements of the 
Federal Bureau cf Investigation at the Department of Justice 
under sections 1.4 and 1.7 [g] of this order and under the 
supervision cf the Attorney General and pursuant to Such 
regulations as the Attorney General may establish, the Director 
cf the Federal Bureau of Investigation shall provide technical 
assistance, within or outside the United States, to foreign 
intelligence and law enforcement services, consistent With 
section 1.3(b) (20) and ('21) of this order, as may be necessary 
to support national or departmental missions. 

PAM 2 Conduct of Intelligence .activities 

2.1 Weed. timely, accurate, and insightful information about 
the activities, capabi litres r plans, and intentions of foreign 
powers, organizations, and persons, and their agents, is 
essential to Informed decisionmaking in the areas of national 
security, national defense, and foreign relations. Collection 
of such information is a priority objective and will be pursued 
in a vigorous. Innovative, and responsible manner that is 
consistent with the Constitution and applicable law and 
respectful of the principles upon which the united states was 
founded. 

2.2 Purpose* This Order is intended to enhance human and 
technical collection techniques, especially those undertaken 
abroad, and the acquisition of significant foreign intelligence, 
as well as the detection and countering of international 
terrorist Activities, the spread of weapons of mass destruction, 
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and espionage conducted by foreign powers. 5et forth below are 
certain general principles that, in addition to end consistent 
with applicable laws, are intended to achieve the proper balance 
between the acquisition of essential, information and protection 
of individual interests. Nothing in this Order shall be 
construed to apply to or interfere with any authorized civil or 
criminal law enforcement responsibility of any -department or 
agency. 

2.1 Collection of informs tion _ Elements of the Intelligence 
Community are authorized to collect, retain, or disseminate 
information concerning United States persons only in accordance 
with procedures established by the head of the Intelligence 
community element concerned or by the head of a department 
containing such element and approved by the Attorney General, 
consistent with the authorities provided by Part l of this 
Order, after consultation with the Director. Those procedures 
shall permit collection, retention, and dissemination of the 
following types of information ; 

(a) Information that is publicly available Or collected 
with the consent of the person concerned? 

<b) Information constituting foreign intelligence or 
counterintel ligenne,, including such information concerning 
corporations or other commercial organisations. Collection 
within the United states of foreign intelligence not otherwise 
obtainable shall be undertaker by the Federal Bureau of 
Investigation [FED or, when significant foreign intelligence is 
sought , by other authorised elements of the Intelligence 
Community, provided that no foreign intelligence collection by 
Sutb elements may be undertaken for the purpose of acquiring 
information concerning the domestic activities of United States 
persons ? 

<C> nn formation obtained in the course of a lawful foreign 
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intelligence? counterintelligence? interna tionai drug or 
international terrorism investigation; 

(dl Information needed to protect the safety of any persons 
or organizations, including those who are targets? victims? or 
hostages of international terrorist organizations; 

(el information needed to protect foreign intelligence or 
counterintelligence sources, methods? and activities from 
unauthorised disclosure. Collection within the United States 
shall be undertaken by the FBI except that other elements of the 
intelligence Cortimunity may also collect such information 
concerning present or former employees? present or former 
intelligence element contractors Or their present or former 
employees? or applicants for such employment or contracting; 

(£} Information concerning persons, who are reasonably 
believed to be potential sources or contacts for the purpose of 
determining their suitability or credibility? 

(gf information arising out of a lawful personnel? 
physical, or cannnunr cat ions security investigation; 

(hi information acquired by overhead reconnaissance not 
directed at specific United States persons; 

(U incidentally obtained information that may indicate 
involvement in activities that may violate Federal? state, 
local, oe foreign laws; and 

(j} Information necessary administrative purposes. 

In addition? elements of the Intelligence Community may 
disseminate information to each appropriate element within the 
intelligence Community for purposes of allowing the recipient 
element to determine whether the inf ormatlnn is relevant to its 
responsibilities and Can be retained by it? except that 
information derived from signals Intelligence may only be 
disseminated or made available to Intelligence Community 
elements in accordance with procedures established by the 
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Director in coordination with the Secretary of Defense and 
approved by the Attorney General. 

2.4 Collect ! 017 Techniques, Elements pf the Intelligence 
Community Shall use the least intrusive Collection techniques 
feasible within the United States or directed against 
United States persons abroad. Elements of the Intelligence 
Community are not authcrit*d to us* such techniques as 
electronic surveillance* unconsented physical Searches* mail 
surveillance, physical surveillance, or monitoring -devices 
unless they are in accordance with procedures established by the 
head of the intelligence community element concerned or the head 
of a department containing such element and approved by the 
attorney General., after consultation with the Director. Such 
procedures shall protect constitutional and other Legal rights 
and limit use of such information to lawful governmental 
purposes. These procedures shall not authorize: 

Cal' Th* Central intelligence; Agency fClA) to engage in 
electronic surveillance within the United States except for the 
purpose of training* testing, or conducting countermeasures to 
hostile electronic surveillance; 

£b| Un consented physical searches in the United States by 
elements of the Intelligence Community other than the FBI, 
except for: 

tl) Searches by counterintelligence elements of the 
military services directed against military personnel within the 
United States or abroad for intelligence purposes, when 
authorized by a military commander empowered tc approve physical 
searches for law enforcement purposes, based upon a finding of 
probable cause to believe that such persons ace acting as agents 
of foreign powers; and 

(2J searches by CIA of personal property of non" 

United States persons lawfully in its possession; 
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(c} Physical surveillance of a United States person in the 
United States by elements of the intelligence Community other 
then the FBI, except for; 

U) Physical Surveillance of present Or former 
employees* present or former intelligence element contractors or 
their present or former employees, or applicants for any such 
employment or con trac ting* and 

(Zj Physical surveillance of a military person 
employed by a non -Intelligence element of a military service; 
ar.d 

i|dj Physical surveillance of & United States person abroad 
to col leer foreign intelligence^ except to obtain significant 
information that cannot reasonably be acquired by Other means. 

2.5 Attorney General Approval. The Attorney General hereby is 
delegated the power to approve the use fpr intelligence 
purposes, within the United States or against & United States 
person abroad* of any technique for which a warrant would be 
required if undertaken fur law enforcement purposes, provided 
that such techniques shall not be undertaken unless the Attorney 
General has determined in each case that there is probable cause 
to believe that the technique is directed against a foreign 
power or an agent of a foreign power. The authority delegated 
pursuant to this paragraph* including the authority to approve 
the uae of electronic surveillance as defined in the Foreign 
Intelligence Surveillance Act of 197S, as amended, shall be 
exercised in accordance with that Act, 

2.6 Assistance to Law Ehfortei&sn t end other Civil Author i ties. 
Elements of the Intelligence Community are authorized to: 

4a} Cooperate with appropriate law enforcement agencies for 
the purpose of protecting the employees, information, property, 
and facilities of any element of the intelligence community! 

{bj Unless otherwise precluded by law or this Order, 
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participate in law enforcement activities to investigate or 
prevent clandestine intelligence activities by foreign powers, 
or international terrorist or narcotics activities; 

(cJ Provide specialized equipment, technical knowledge, or 
assistance of expert personnel fot use by any department or 
agency ( or -When lives are ends nge red r to support local law 
enforcement agencies. Provision of assistance by expert 
personnel shall be approved in each case by the general counsel 
of the providing element or department; and 

<d} Render any other assistance and cooperation to law 
enforcement or other civil authorities not precluded by 
appl i cab 1 e law , 

2 r l contracting. Elements of the intelligence Community are 
authorized to enter into contracts or arrangements for the 
provision of goods or services with private companies or 
institutions in the United States and need not reveal the 
sponsorship of such contracts or arrangements for authorized 
intelligence purposes- Contracts or arrangements with academic 
institutions may be undertaken only with the consent of 
appropriate officials of the ingti tution . 

2.S Consistency With Other Laws. Nothing in this Order shall be 
construed to authorize any activity in violation of the 
Constitution or statutes of the United States, 

und is closed Participation in Organizations Within tfie 
United States, No one acting on behalf of elements of the 
Intelligence Community may join or otherwise participate ir, any 
organization in the United States on behalf of any *l*m*ht Of 
the Intelligence Community without disclosing such person' s 
intelligence affiliation to appropriate officials of the 
organization, except in accordance with procedures established 
by the h*ad of the intelligence Community element concerned or 
the head of a department containing such element and approved by 
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the Attorney Gene ra 1, after consul taticn with the Director. 

Such participation shall be authorized only if it is essential 
to achieving Lawful purposes as determined by the intelligence 
Community element head or designee. Ho such participation may 
be undertaken for the purpose of influencing the activity of the 
organization or its members except in caaes where; 

[a] The participation is undertaken On behalf of the FBI in 
the course of a lawful investigation; or 

lb] The organization concerned is composed, primarily of 
individuals who are not United States persons and is reasonably 
believed to be acting on behalf oE a foreign power. 

2. ID Human Experimentation- No element of the intelligence 
Community Shall sponsor. Contract for, or conduct research on 
human subjects except in accordance with guidelines issued by 
the Department of Health and Human Services . The subject's 
informed consent shall be documented as required by those 
guidelines . 

2.11 Prohibition on Assassination, Mo person employed by or 
acting on behalf of the United States Government shall engage in 
or conspire to engage in assassination. 

2.12 Indirect ^artlcipa tion . Mo element of the Intelligence 
Community shall participate in or request any person to 
undertake activities forbidden by this Drder , 

2.13 Diitri ra tion ori Covert Action. No covert action may be 
conducted which is intended to influence United States political 
processes, public opinion, policies, or media , 

PART 3 General Fro visions 

3,1 Congressional oversight. The duties and responsibilities of 
the Director and the heads of other departments, agencies, 
elements, and entities engaged in intelligence activities to 
cooperate with the Congress in the conduct of its 
responsibilities for oversight of intelligence activities shall 
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be implemented in accordance with applicable law, including 
title V Of the Act. Tho requirements of applicable law* 
including title V of the Act, shall apply to all covert action 
activities as defined in this Order. 

3.2 implementation, the President, supported by the NSC, 
and the Director shall issue such appropriate directives* 
procedures, and guidance as are necessary to implement this 
Order. Heads of elements Within the Intelligence Community 
shall issue appropriate procedures end supplementary directives 
consistent with this order. Ha procedures to implement Part 2 
of this order shall be issued without the Attorney General's 
approval, after consultation with the Director^ The Attorney 
General shall provide a statement of reasons for not approving 
any procedures established by the head of an element in the 
Intelligence Community (or the head of the department containing 
such element! other than the FBI, in instances where the 
element head or department head and the Attorney General are 
unable to reach agreements on other than constitutional or other 
legal groyndg, the Attorney General* the head of department 
Concerned, or the Director shall refer the matter to the NSC. 

3.3 Procedure* , The activities herein authorized that 
require procedures shall be conducted in accordance with 
existing procedures or requirements established under Executive 
Order 12333* Wew procedures, as required by Executive 

Order 12333, as further amended* shall be established as 
expeditiously as possible* All new procedures promulgated 
pursuant to Executive Ord*i 12333* as amended, shall be made 
available to the Select Committee on Intelligence of the Senate 
end the Permanent Select Conuflittee on Intelligence of the House 
□f Representatives. 

3.4 flrtfsrancea and Tt&nsiti&n. References to * Senior Officials 

□f the Intelligence Corranunity" or "SOICa" in executive orders or 
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Other Presidential guidance, shall be deemed references to the 
beads of elements in the Intelligence Community, unless the 
President otherwise directs; references in Intelligence 
Community or intelligence Conjfliunity element policies or 
guidance, shall be deemed to be references to the heads of 
elements of the Intelligence Community, unless the President or 
the Eli rector otherwise directs-* 

3.5 .Definitions, For the purposes of this Order, the following 
terms shall have these meanings! 

I'u'l Counter intelligence means information gathered and 
activities conducted to Identify, deceive, exploit, disrupt, or 
protect against espionage, other intelligence activities, 
sabotage, or assassinations conducted for or on behalf of 
foreign powers, organizations, ox persona, or their agents, or 
international terrorist organizations or activities. 

CbJ Covert action means an activity nr activities of the 
United States Government to influence political, economic, Ot 
military conditions abroad, where it is intended that the role 
of the United States Government will not be apparent or 
acknowledged publicly, but does not include: 

(1) Activities the primary purpose of which is to 
acquire intelligence, traditional counterintelligence 
activities, traditional activities to improve or maintain the 
Operational security Of united States Government programs. Or 
administrative activities; 

(2) Traditional diplomatic or military activities or 
routine support to such activities; 

(31 Traditional Law enforcement activities conducted 
by United States Government law enforcement agencies or routine 
support to such activities; or 

HJ Activities to provide routine support to the 
overt activities (other than activities described in 


36 

8-37 


UHGLASSIFED - OFFICIAL USE CM-'t 
D^rwiic! InuMfairtrrB him] Chw-Blimr Gu* 


paragraph (I),, 12), or <1}J of other L'nited States Governme n t 

agencies abroad. 

( o | El&rt rani c $u r vei 2 1 a pde mfta ns a nqi j i a i t i a n of a 
non pub Lie communication by electronic means without the consent 
of ci petsc-n whti is a pat^y to an electronic commnnicat ion or, in 
the case of a nonelectronic communication.,, without the consent 
ot d person who is visibly piesunt at the plate of 
tornmur.icat ion, but not including the use of radio direction- 
r hiding Ctj i pmcrit solely to determine the Location cf a 
transmitter . 

(di Employee means a person ■employed by, assigned 
or detailed to, or acting for an element within the Intelligence 
Community., 

(e) Foreign i e 1 i i gecce means information relating to the 
capabilities,, intentions r or activities cf foreign QOvti r.mertt-S 
■or elements thereof, foreign organizations, foreign persons, or 
i n t e rna tional terrorists, 


(f> hi t a 1 1 i gence includes foreign intelligence and 


counterintel Ligence . 

<qj r.nrei acr ruiffrt.? means all activities chat 

elements of the Lnte 1 _ igence Community are authorized to conduct 
pursuant Lo this ortifti , 

■j K > Intelligence Common i £y and elements of the 
T 1 1 1 e J I ; gene u Common 1 1 y i e f e r & to ; 

(1) The Office of the Director of .National 
I n r.e 1 1 1 gene e ; 


(21 The Central Intelligence Agency: 

tSj The National Sfe'eurity Agency; 

(4) The Defense Intelligence Agency? 

(£1 The National Geospatial -Intelligence Agency; 

1 The National Reconnaissance Office; 

(7j The ether offices within the Department 
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of Defense for the collection of specialized national foreign 
intelligence through reconnaissance programs; 

10) The intelligence end counter intelligence 
elements Of the Army, the Navy, the Air Force, and the Marine 
Corps; 

49) The intelligence elements of the federal Bureau 
of investigation? 

(1QJ The Office of National Security Intelligence of 
the Drug Enforcement Administration; 

411] The Office of Intelligence and 
Counterintelligence of the Department of Energy? 

412} The Bureau of Intelligence and Research of the 
Department of State; 

(13} The Office of Intelligence and Analysis of the 
Depart men t of the Treasury? 

414] The Office of Intelligence and Analysis of the 
Department of Homeland Security; 

415} The intelligence and counterintelligence 
elements of the Coast Guard; and 

41fi} Such other elements of any department or agency 
as may be designated by the President, nr designated jointly by 
the Director and the head of the department or agency concerned, 
as an element of the Intelligence Community, 

(i> National intelligence and intelligence delated to 
NiStiOflal Security means all intelligence, regardless of the 
source from which, derived and including information gathered 
within or outside the United States, that pertains, as 
determined consistent with any guidance issued by the .President, 
or that is determined for the purpose of access to Information 
by the Director in accordance with section 1.34a) £1} of this 
order* to pertain to more than one United States Government 
agency; and that involves threats to the United States, its 
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people, property, or interests: the development, proli feration , 
pr use of weapons of mesa destruction; or an/ other me L tea 
bearing cn. United States national or heme land security. 

<j> r.he ih 1 eiJi 9 ert.ce Program (titans all programs , 

projects, and activities cf the intelligence Community, as well 
as any other programs of the Intelligence Community designated 
jointly by the Director and the head of a United States 
department or agency Or by the President. Such term does not 
include programs, projects, or activities of the military 
departments to acquire intelligence solely for the planning and 
nonduct of tactical military operations by United States Armed 
Forces . 

ik) Vnizetf- States person moans a United States citizen, an 
alien known by the intelligence element concerned to be a 
permanent resident alien, an unincorporated association 
substantially composed of United States citizens nr permanent 
resident aliens, or a corporation incorporated in the 
United States, OKC*pt 1 or a corporation directed and controlled 
by a foreign government or governments. 

1,6 FmcaCiciJi. Executive Orders 13:53 and 13355 cf August 2' 1 , 

2 DC-4, ate revoked; and paragraphs I .3 Jhl (9| and I J fl :■ of Far- 1 
supersede provisions within Executive Order 129 5B, as amended, 
to the extent such provisions in Executive Order 1295&, an 
amended, are inconsistent with this Order. 

3,-7 SebersJ Precisions, 

la) Consistent with section 1.3(c) cf this order, nothing 
in this ordei shall fc* const rued to impair or otherwise affect: 

(1) Authority granted by law to a department or 
agency, ci the head thereof; or 

(2) Functions, of the Director o-f the Office of 
Management and Budget relating to budget, 
administrative, dr legislative proposals. 
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<b> This order shall be iiuplecnentad consistent with 
applicable law and subject to the availability of 
appropriations, 

(c) This Didar is intended only to improve the internal 
management of the executive branch and ia not intended to, 
and does not, create any right or benefit, substantive Of 
procedural, enforceable at law or in equity, by any party 
against the United States, its departments, agencies or 
entities, its officers, employees, at agents, or any other 
parson. 


/&/ Ronald Reagan 


THE WHITE HOUSE 
December 4, 1531 
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APPENDIX C: (U//FGUO) USE AND TARGETING OF A FEDERAL 
PRISONER HELD LN THE CUSTODY OF THE BOP OR USMS 
DURING AN FBI PREDICATED INVESTIGATION; INTERVIEW OF A 
FEDERAL PRISONER HELD IN THE CUSTODY OF THE BOP OR 
USMS DURING AN FBI ASSESSMENT OR PREDICATED 
INVESTIGATION 

C. 1 [U) G VE R VIE w/ $U M MARY 

(U.VFOliO) Lise and Targeting » Federal Prisoner; During an FBI Predicated Investigation, it 
may be necessary and appropriate to: I ) use a cooperating federal prisoner to gather and obtain 
evidence and intelligence; or 2) target a federal prisoner. This policy sets forth the approval 
process for the use of and targeting of a federal prisoner held in the custody of the Bureau of 
Prisons (BOP) or the United Stales Marshals Service (USMS). 

(U//FOUO) Interview a Federal Prisoner: During an FBI Assessment or Predicated 
Investigation, it may be necessary and appropriate to interview a federal prisoner in the custody 
of the BOP or USMS. This policy sets forth the approval process for the interview of a federal 
prisoner held in the custody of the BOP or the USMS during an FBI Assessment or Predicated 
Investigation. 

{ U/VFOUO) Ftchisiims from this Policy: This policy does noi apply Co: 

A) | U//FOUO) the use of a Federal Prisoner, who is a Confidential Human Source (CHSjl under 
the circumstances listed in the CHHPM section 6.24; nr 

B) (U//FCHJO) the use, targeting, or interview oi'a prisoner held in Ihe custody of the Department 
of Defense ( DC>D). 

C.2 (U) Legal Authority 

iU) The FBI is authorized by the Department of Justice (DOJ) to use and target a federal prisoner 
for investigative purposes and interview a Federal Prisoner (DOJ Memorandum “ Use and 
T arttctinH o f Federal. Pri soner* in Inv estigations ." January 22. .2009). 

C.3 (U) Definitions 

I U) Federal Prisoner: For purposes within this section, a tederal prisoner is one who is held in 
the custody of cither the BOP or the USMS pursuant to an order of a court in connection with a 
criminal matter, regardless of where the person is housed. 

(U) Lise of a Federal Prisoner: Use of a federal prisoner means to employ a federal prisoner 
during an investigation in such a manner that the prisoner will interact with others who are not 
members of law enforcement (e,g„ the prisoner will engage in a eonseosually monitored 
telephone call with a target) or the prisoner will be tahen out of the custody of BOP or USMS 
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(e,g„ the prisoner is removed from the prison to assist the FBI in locating a hid? out) or law 
enforcement will interact covertly with the prisoner (e.g., an undercover agent engages with the 
prisoner in the visiting room of the prison), 

(U) Targeting a Federal Prisoner: “Targeting” a federal prisoner means that the federal 
prisoner is the target of the investigation and that investigative activity will directly interact with 
either the prisoner or the federal facility (e.g., as part of a money laudering investigation 
targeting a prisoner, the FBI wishes to engage in a consensual^ 1 monitored conversation with the 
prisoner). 

(U) Interview ul a Federal Prisoner: Interview of a federal prisoner means to interact with a 
federal prisoner, overtly representing oneself as an FBI employee, in order to gather information. 

CJ, 1 (U) Use a nd Targeting a Federal Prisoner 

IU//FGUO) An FBI employee may request the use of or the targeting of a federal prisoner in an 
FBI Predicated Investigation by completing the DOJ “Request to Utilize or Target a BOP or 
USMS Prisoner for Investigative Purposes' 1 form (herein the “DOJ form 11 ) located on the CPO 
DIOG ShareFomt site . 

(U//FOUO) The FBI Employee must document the required information and approvals as 
specified below on the DOJ form, A copy of the form must be uploaded and serialized in the 
appropriate investigative file, after it has been approved by the field office SSA and submitted to 
the FBIHQ operational unit for consideration and coordination of approval by DOJ. 

C.3,2 (U) Interview a Federal Prisoner 

(U//FOUO) An FBI employee may request to interview a federal prisoner in ail FBI Assessment 
or Predicated Investigation by obtaining: the approval of the appropriate FBI official as specified 
below; and concurrence of the Warden/BOP or USMS, as appropriate, or an order of the court. 
The results of the interview should he documented with an EC or 302. as appropriate under the 
circumstances, and uploaded and serialized into the appropriate investigative file. 

C.4 (U] Approval Requirements 

CA.1 (U) A pproval - Use and Ta rgeting a Federa i Prisoner 

(U//FOUO)Thc FBI employee must obtain the prior approval of the field office SSA and 
must document the required information using the required DOJ form to seek the approval of 
FBIHQ and UOJ for use or targeting a federal prisoner, 

(U//FOUO) DOJ Form: The field office must submit the DOJ form to the appropriate 
FBIHQ operational unit for review and approval* as specified below. The FBIHQ operation 
unit will coordinate the review and approval process with DOJ, as specified below. The 
process is as follows: 

A) (Uy/FOUO) The FBI employee must: 

1) (U//FOUO) Obtain the approval of the field office SSA responsible for the 
Predicated Investigation; 

Vrrakwi Dated; 
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2) (U//FOUO) Obtain the written (XmcumsflCc of the Wankn/BQP/USMS, as 
appropriate; 

3) (LWFOlfQ) Complete the DOJ “Request to Utilize or Targel a BOP or USMS Prisoner for 
Investigative Purposes*" form (“DOJ form**) located on the DIOG Share Point sitg ; 

4) tUi'/FOUO) Obtain a Sealed Court Order: If die request involves ihc temporary transfer of 
a federal prisoner from the custody of BOP or USMS to the FBI, Ihen the AUSA must 
obtain a sealed court order authorizing the transfer of custody and must adhere to FBI 
guidelines for transporting a federal prisoner (see Section C.8 below}; 

5) (U//FGUOJ Email the eompfeted DOJ form to FliEHQ operational unit point-of-contact; 
and 

6) (UJ/FOUQ) If the request is approved by the OtTice of Enforcement Operations (OFO). 
DOJ Lhe FBI employee must, within 15 days of completion of use or largeling of the 
prisoner, provide the FBIHQ operational unit with the information necessary to complete 
the final disposition Action Memorandum (See item C.5.LB.4 below). 

B) (U//FOUQ) The FBIHQ operational unit must: 

1 ) (U//FOUO) Review the 3X)J form and obtain the approval of the appropriate operational 
Section Chief; 

2) (U//FOUQ) Forward by facsimile (fax) the DOJ form to OEQ for consideration and 
approval (OEO fax tf is (202} 514-5 143); 

3) (U//FOUO) Provide the field office timely notification of CEOs decision whether to grant 
permission to use or target the prisoner and 

4 ) (U//FOUO) Within 30 days of completion of use or targeting of the prisoner, provide 
OHO with a final disposition Action Memorandum. 

(U//FOUO) Exigent Circumstances: If there are exigent circumstances requiring an 
immediate response, OEO will accept oral requests for approval from the FBIHQ operational 
unit. Confirmation of the request and appropriate supporting information muse however, be 
submitted to OEO In writing as soon as possible after oral approval is obtained. 

(U//FOUO) For questions or exigent circumstances,. the field must contact the FBIHQ 
operational Lintf, who will be responsible for contacting the DOJ Chief of the Witness Security 
and Operations Unit at (202) 307-3314, OEO, or Deputy Chief of Special Operations, at (202) 
5 1 4-3684. 

f U//FOUO) JVbfB The DOJ Memorandum governing the Use and Targeting of Federal 
Prisoners is labeled ‘Sensitive Investigative Matter," This is not a SIM as defined in DIOG 
Section 10. As such, this policy does not require CDC review and SAC approval. 

C4.2 (U) Approval - Interview a Federal Prisoner 

(U//FOUQ) The FBI employee must: 

A) (U'VFOUQ) Obtain the prior approval of the field office SSA to interview a federal prisoner in 

locations listed under Section C.&BJ-3 below; 

&) {U7FQUQ) Obtain the prior approval of the field office SS.A and SAC to interview a federal 

prisoner in any location under Section C.6.B.4 below ; and 
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C> ( U/r FOUO) Obtain Che concurrence of the W a rde n' BO P/U SMS. as appropriate. 

C.5 (U) Exemptions to DOJ Approval Requirement 

(U/ FOUO) When all four of the following conditions are met, neither approval nor Consultation 
with DOJ is required for a cooperating prisoner Iej engage in cunscnsually monitored telephone 
tails, test messages* or computer communications once the prisoner has given consent. (This 
situation will typically occur when the prisoner is newly arrested and still in FHI or US MS. 
custody): 

A I (IJ/'T'QUO) Cooperating prisoner is not in IR)P custody or under BOP supervision [e.g., not in 
a BOP operated facility, BOP contract facility, BOP halfway house, or under BOP home 
detention.^ I eel roni e rnoni tori ng ] ; 

B) (U/.-'FOUU) The prisoner will participate in consensual monitoring from one of the following 
locations: 

1 ) (U//FOUO) A detention facility not operated by BOP; 

2) {WFQUQ) A United States Attorney's Office (US AO); 

3 ) (U/.' FOUO) An o ffl w of an i nvesli gat i ve age ncy : or 

4) (UZ/TOLIO) A secure location under the control or the FBI; 

C) fUZZFOUO) No follow-up activity by (he prisoner that would require OLD approval is 
anticipated to occur as a result of the consensual monitoring: and 

D) (U//FOUO) The FBI employee supervising the consensual monitoring has compiled with all 
FHI policies governing consensual monitoring. 

(U) Note : Unless all four of the above conditions are met. the agent must have OF.Q approval to 
use a federal prisoner to engage in consensual monitoring. 

(U/ZFOUQ) Neither approval nor consultation with (JEO is required for a cooperating prisoner !■ ■ 
engage in a debriefing, polygraph, p roller, re-enactment at scene of a crime: or aiding in the 
location of a hide-out, etc., once the prisoner has given consent, if the prisoner will participate ! 
such activity in one of the following locations: 

A ) (U//FOUO) A detention facility, including one operated by the tiPO or l ISMS; 

B) { L//FOUO) A United States Attorneys Office: 

Cj (UZ/FOLTO) An office of an investigative agency; or 
D) (LI/TFOUG) A secure location under the control of the FBI. 

C.6 [U] Extension Requests 

(U//FOUO) Agents may request extensions of the authority to use or target a prisoner in an i f 
investigation by providing GEO with a written report containing she following; 

A) t U//FOUO) Up-to-date summary pf use or targeting of the federal prisoner 

B) t UZZFOUO) Justification for continued use or targeting of the federal prisoner; 

CJ (U/ZFOUO) Endorsement of A USA; 
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DJ CU//FOUO) Endorsement of the federal prisoner’ s counsel; and 
E} (U//FGLTO) Wanden/BOF/USMS concurrence. 

C7 (U) Transportation of Federal Prisoner 

(U//FOUO) If it is necessary to remove the federal prisoner from the detention facility in which 
he/stie is housed as a part of the investigation. DOJ GEO policy mandates the following 
minimum standards for transfer of custody from BQP/USMS to (he FBI for "Use or Targeting of 
a Federal Prisoner:" 

A) (LWFOUQ) Prisoner must be restrained; in leg shackles and handcuffs with a waist chain 
during transport: 

B) (U//FQUO) A trail vehicle musl be used during transport: 

C) (UZ/FOUQ) Prisoner must neither make nor receive any private visits or telephone calls; 

D) (U//FOUO) Prisoner must have no contact with the public, including, in restaurants or 
restrooms; 

E} ILWFOIJO) Prisoner must not consume alcoholic beverages; 

F) (U//FOUQ) Prisoner musl be given no advanced notice of higher transfer from BQP/USMS to 
FBI: 

G) (U//FQUO) If overnight housing is necessary; prisoner must be kept, in a U SMS-approved 
detention facility: and 

H) tU//FOLQ) The transportation must occur during daylight hours. 


UNCLASSIFIED - I UR OFFICIAL USE ONLY 


UNCLASSIFIED ■ FOR OFFICIAL USE ONLY 
DtHwaslijC Invo&iigaiiuns and Qfrttfalittii Guide 


APPENDIX D: (U) DEPARTMENT OF |USTICE 
MEMORANDUM ON COMMUNICATIONS WITH THE WHITE 
HOUSE AND CONGRESS, DATED MAY 11, 2009 
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»f life Attotrtcp feiwral 
Utaflhtnftim, ■©. (5. 30530 


May 11. 2009 


MEMORANDUM FOR HEADS OF DEPARTMENT COMPONENTS 
ALL UNITED STATES ATTORNEYS 


FROM: 




ATTORNEY GENERAL 


SUBJECT: 


Communications wilfr the White House and Omaress 


The rule of law depends upon the cvenhandcd administration of justice. The legal 
judgments of the Department of justice must be impartial and insulated from political influence. 
It is imperative that the Department's investigatory and prosecutorial powers be exercised free 
from partisan consideration. It is a fundamental duly of every employee of (he Department io 
ensure that these principles are upheld in all of the Department's legal endeavors. 

In order to promote the rule of law, therefore, this memorandum sets out guidelines to 
govern all communications between representatives of the Department, on the one hand, and 
representatives of die White House and Congress, on the other, and procedures intended to 
implement those guidelines. (The '"White House, 1 ' for the purposes of this Memorandum, means 
all components within the Executive Office of the President.) These guidelines have been 
developed in consultation with, and have the full support of T the Counsel to the President. 

■ Fendinu or Contemplated C riminal .QUCiv tl Investigations and Cases 

The Assistant Attorneys General, the United States Attorneys, and the heads of die 
investigative agencies in the Department have the primary responsibility to initiate and supervise 
investigations and cases. These officials, like the] r superiors and their subordinates, must be 
insulated from influences that should not affect decisions in particular criminal or civil cases. As 
the Supreme Court said long ago with respect la United Slates Attorneys, so it is (rue of all those 
who exercise the Department’s investigatory and prosecutorial powers: they are representatives 
“not of an ordinary party to a controversy, but of a sovereignty whose obligation to govern 
impartially is as compelling as its obligation to govern at *11; and whose interesi, therefore, in a 
criminal prosecution is not that it shall win a case, but that justice shall be done/ 1 Berger v. 
United States 295 ITS. 78, 88 [1935) 

a. In order la ensure the President's ability to perform his constitutional obligation (o 
"take care that the laws be faithfully executed," the Justice Department will advise the White 
House concerning pending or contemplated criminal or civil investigations or ease* when— but 
only when — it is important for the performance of the President’s duties and appropriate from a 
law enforcement perspective. 
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Memorandum for Head of Department Components 
All Uni led States Attorneys 

Subject: Communications with the While House and Congress 


Page 2 


b. Initial communications between the Department and the White House concerning 
pending or contemplated criminal investigations or cases will involve only the Attorney General 
or the Deputy Attorney General, from the side of the Department, and the Counsel to the 
President, the Principal Deputy Counsel to the President,, the President or the Vice President, 
from the side of the White House. If the communications concern a pending or contemplated 
civil investigation or case* the Associate Attorney General may also be involved. If continuing 
contact between the Department and the White House on a particular matter is required, the 
officials who participated in the initial communication may designate subordinates from each 
side to camry on such contact. The designating officials must monitor subsequent contacts, and 
the designated subordinates must keep their superiors regularly informed of any such contacts. 
Communications about Justice Department personnel in reference to their handling of specific 
criminal or civil investigations or cases arc expressly included within the requirements of this 
paragraph. This policy does not. however, prevent officials in the communications, public 
affairs,, or press offices of the While House and the Department of Justice from communicating 
with each other to coordinate efforts. 

C. In order to ensure that Congress may cany out its Legitimate investigatory and 
oversight functions, the Department will respond as appropriate to inquiries from Congressional 
Committees consistent with policies, laws, regulations, or professional ethical obligations that 
may require confidentiality and consistent with the need to avoid publicity that may undermine a 
particular investigation or Litigation. Outside the context of Congressional hearings or 
investigations, all inquiries from individual Senators and Members of CongfCM or (heir staffs 
concerning particular contemplated or pending criminal investigations or eases should be 
directed to the Attorney General or the Deputy Attorney General. In the case of particular civil 
investigations or cases, inquiries may also be directed to the Associate Attorney General. 

d. 1~hese procedures arc not intended to interfere with the normal communications 
between the Department and its client departments and agencies (including agencies within the 
Executive Office of the President when they are the Department's clients) and any meetings or 
communications necessary to the proper conduct of an investigation or litigation. 

2. National Security Matters 

It is critically important to have frequent and expeditious communications relating to 
national security matters, including counter-terrorism and counter-espionage issues. Therefore 
communications from (or to) the Deputy Counsel to the President for National Security Affairs, 
the staff of the National Security Council and the staff of the Homeland Security Council that 
relate to a national security matter are rral subject Id the limitations set out above. However, (his 
exception for national security matters does not extend to pending adversary cases in Litigation 
that may have national security implications. Communications related to such cases are subject 
to the guidelines for pending cases described above. 
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Memorandum for Head of Department Components 
All United Stales Attorneys 

Subject: Communications with I he White House and Congress 


Page 3 


3. White House Requests for Legal Advice 

AU requests from the White House for formal legal opinion! shall come from ihe 
President, the Counsel to the President or one of the Deputy Counsels to the President and shall 
be directed to the Attorney General and the Assistant Attorney General for the Office of Legal 
Counsel. The Assistant Attorney General for the Office of Legal Counsel shall report to the 
Attorney General and the Deputy Attorney General any communications that, in his or her view, 
constitute improper attempts to influence the Office of Legal Counsel's Legal judgment, 

4. Comm Wiltons ipvai vi m tJte . Se lititeLQHara) 1 i-QPTice 

Matters in which the Solicitor General's Office is involved often raise questions about 
which contact with the Office of the Counsel to the President is appropriate. Accordingly, the 
Attorney General and Deputy Attorney General may establish distinctive arrangements with the 
Office of the Counsel to govern such contacts, 

5. Presidential Pardon Matters 

The Office of the Pardon Attorney may communicate directly with the Counsel to the 
President and the Deputy Counsels to the President, concerning pardon mailers, The Counsel lo 
the president and the Deputy Counsels to the President may designate subordinates to carry on 
contac t wi th the Office of die Pardon Attorney after the initial contact ts made, 

5. Personnel Decisions Concerning Positions in ihe Civil Service 

All personnel decisions regarding career positions in the Department must be made 
without regard to ihe applicant's or occupant’s partisan affiliation. Thus, while the Department 
regularly receives communication* from the Whito House and from Senators, Member* of 
Congress, and their staffs concerning political appointments, such communications regarding 
positions in the career service are not proper when they concent a job applicant's or a job 
holder's partisan affiliation. Efforts to influence personnel decisions concerning career positions 
on partisan grounds should be reported lo the Deputy Attorney General. 

7 . Other Communication s Not Relating lo Pending Investigations 
or Criminal or Civil Cases 

All communications between the Department and the While House Of Congress that ire 
limited to policy, legislation, budgeting, political appointments, public affairs, intergovernmental 
relations. Of administrative matters that do not relate to a particular contemplated or pending 
investigation or case may be handled directly by the parties concerned. Such communications 
should take place with the knowledge of the Department's lead conflict regarding the subject 
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Memorandum for Head <3 f Department Components Page 4 

AJ1 United Stales Attorneys 

Subject: Comm umcations with the White House and Congress 

under discussion In the case of communications with Congress, the Office of the Deputy 
Attorney General and Office of the Assistant Attorney General for Legislative Affairs should be 
kept informed of all communications concerning legislation and the Office of the Associate 
Attorney General should be kept informed about important policy communications in its areas of 
responsibility. 

As Attorney General Benjamin CiviietH noted in issuing a similar memorandum during 
the Carter Administration, these guidelines and procedures are not intended to wall off the 
Department from legitimate communication. Wc welcome criticism and advice, What these 
procedures are intended to do is route communications to the proper officials so they can be 
adequately reviewed and considered, free from either the reality or the appearance of improper 
influence. 

Decisions to initiate investigations and enforcement actions are frequently discretionary. 
That discretion must be exercised to the extent humanly possible without regard to partisanship 
or the social, political, or interest group position of either the individuals involved in the 
particular cases or those who may seek to intervene against them or on thcLr behalf 

This memorandum supersedes ihc memorandum issued by Attorney General Mukascy on 
December 1 5L 2007. titled Communications with the While ffouse. 
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APPENDIX E: (U//FOUO) ATTORNEY GENERAL 
MEMORANDUM - REVISED POLICY ON THE USE OR 
DISCLOSURE OF FISA INFORMATION, DATED JANUARY 10, 
2008 
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ITS. Department of Justice 

National Security Division 


Office of (tie Assistant Ancoitiey General 


fTtuhiitfon D.C. 20539 


January 10, 200! 


TO: 


All United Stales Attorneys 

All National Security Division Attorneys 


All Anti-Terrorism Coordinators 


CC: 


Assistant Attorney General, Criminal Division 
Assistant Attorney General, Civil Division 
Director, Federal Bureau of Investigation 


FROM: Kenneth L. Wainstein 

Assistant Attorney General for National Security 



SUBJECT: Revised FISA Use Policy as Approved bv the Attorney General 

We are pleased to provide the Department of Justice's revised policy On the use Or 
disclosure of information obtained or derived from collections under the Foreign. Intelligence 
Surveillance Act of 1 978 (FISA), as approved by the Attorney General today. Also attached is a 
form for use with respect Co notifications that are required under Section. 1 of the revised policy, 

This revised policy includes significant changes fawn current practice that will streamline 
the process for using FISA information in certain basic investigative processes^ while still 
ensuring that important intelligence and law enforcement interests are protected. 

You will note that the revised policy authorizes the use or disclosure of FISA 
information, under the specific circumstances described in the policy, with notification to NSD 
and after consultation with the FBI (or other intelligence Community agencies) for the following 
investigative processes: 

- grand jury subpoenas for third-party documents to corporations, institutions, and other 
providers of commercial services (where the entities are neither the subjects nor 
targets of the investigation and from which there is no known substantial risk of 
improper disclosure): 
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* nonoompulsory requests for third-party documents to corporations, institutions, and 
other providers of commercial services (where the entities are neither the subjects nor 
targets of the investigation and from which there is no known substantial risk of 
improper disclosure); 

* custodian of records testimony before the grand jury for such subpoenaed parties; and 

■ criminal pen register and trap and trace device applications fcxccpl where the FISA 
information used in the PR/TT application goes bey ond the relevant identifiers)). 

As described in the revised policy, the Depamnenl continues to require prior 
authorization from the Assistant Attorney General for National Security (AAG/NSD) for the use 
or disclosure of FISA information in order to file criminal charges or in post-charge criminal 
proceedings, as wdl as in connection with certain investigative processes (e.g., criminal search 
warrants under Rule 41 of the Federal Rules of Criminal Procedure). The revised policy also 
requires (he prior authorization of the AAG/NSD or his designee for the use or disclosure of 
FISA information in non-criminal proceedings. 

The revised policy was drafted by a Justice Department working group that included 
representatives from the Attorney General's Advisory Committee of United States Attorneys 
(AGAC), National Security Division (NSD), Federal Bureau of Investigation (FBI), and Office of 
Legal Policy (OLP). The working group also consulted with the Office of the Director of 
National Intelligence (QDNI) in the course of the development of this policy, 

The revised policy requires that it be reviewed one year from its effective date and 
requires NSD to issue guidance on what constitutes information " derived from 1 ’ FISA collections 
by March 31, 2008. 

As noted in the policy, prosecutors are encouraged to contact the National Security 
Division at any time in order to obtain guidance regarding this policy and to expedite resolution 
of any issues. 
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U,5. Department of Justice 


Office of lilt Attorney Genera] 


taihAqpoit D.C. 10530 


January 10, 2008 


TO: 


All Federal Prosecutors 


CC: 


Assistant Attorney General, National Security Division 
Assistant Attorney General, Criminal Division 
Assistant Attorney General, Civil Division 
Director, Federal I tigation 


FROM: 


Michael 0. Mukss 
Attorney General 



SU EJECT : Revised Policy On the Use Or Disclosure of FISA Information 

Asa general matter, i t is the policy of the Department of Justice to use all lawful 
processes in the investigation and prosecution of cases involving terrorism, intelligence, and 
national security, and to undertake al l efforts necessary to protect the American people from the 
threat posed by foreign powers and their agents, while also exercising due regard for the 
protection of intelligence sources, methods, and collections, and the privacy and civil liberties of 
United States persons. 

There are important purposes to be served by consultation and coordination with respect 
to the use or disclosure of FISA information 11 in investigations, criminal prosecutions, and other 
proceedings, pirsf because FISA information is almost aEways classified, the use or disclosure 
of such information will normally require declassification by the originating agency in 
accordance with the originating agency’s policies and procedures. Second, the use of such 
information could directly or indirectly compromise intelligence sources, methods, or 
collections, or disclose the existence or nature of or otherwise compromise an investigation. 
Third, FISA requires the Government to notify the court and an "aggrieved person" of its blent 


1 The term "FISA uvfijnnaritm, 1 ' a? used in this policy, means any information acquired, obtained, or derived from, 
ccttcctusn authorised pursuant to FISA. Whether ifweifie Information qualifies as “derived from” FISA collection 
may be a far l-hound question that depends, at Least in part, on the attenuation of the information Id be used from the 
original FISA acquired Or obtained information bid whether the information was also obtained from an independent 
source, as well as other factors-, Where Such a question arises, live applical ion of this policy should be discussed 
among the USAQ, FBI. and NSD. end Lf consensus is not reached, a determination will be made by the Assistant 
Attorney General for National Security. Separate guidance regarding whiri constitutes En/ormadLon “derived from" 
FISA collection wllL be issued try the National Security Division no later than March. 3 J, 20011. 
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to use or disclose any FISA information before it is used against such person in a broad range of 
proceedings. Fourth, the Government is required to ensure that complete and accurate Tilings are 
made with the Foreign Intelligence Surveillance Court (FISC), and that the Government 
complies with all of FISA's statutory requirements. Fifth, it is important to ensure that litigation 
risks, if any, are property assessed. Finally, in certain cases, it may be appropriate to make 
disclosures to a United States District Court regarding classified facts before legal process is 
obtained, 

Given these purposes, il is essential that coordination take place in connection with the 
use or disclosure of FISA information. Such coordination should be streamlined in order to 
promote efficient, nimble, and useful investigative activities. The risk of compromising ibe 
purposes described above varies depending on the stage of the investigation* criminal 
prosecution* df Other proceeding. As a general matter* the risks are comparatively smaller during 
an investigation than during a criminal trial or other proceeding. The use or disclosure of FISA 
information in non-criminal proceedings may present varying levels of risk. Because FISA 
information is almost always classified, federal prosecutors should consider alternative 
approaches for taking action. 

Prosecutors are encouraged to contact (he Marionat Security Division at any time in order 
to obtain guidance regarding this policy and to expedite resolution of any issues. 

The following policy is therefore adopted and supersedes any existing Attorney General 
policies with respect to the use and disclosure of FISA information to (he extent that they are 
inconsistent with this policy: 

(a) the Assistant Attorney General lor National Security may act as the Attorney 
General, as provided for under FISA, see 50 U.S.C. § 1 801(g)* for the purpose of 
authorizing the use or disclosure- of FISA information pursuant to this policy, 2 and 

(b) federal prosecutors and all others who may seek to use or disclose FISA 
information in any trial, hearing, or other proceeding in or before any court, 
department, officer, agency, regulatory body, or other authority of the United 
States, in coordination with NSD and FBI, are authorized to do so pursuant to the 
terms of this policy, shall coordinate with N5D in regard to any litigation that 
results from (he use or disclosure of FISA information, and shall comply with the 
following procedures in matters that involve the use or disclosure of FISA 
information: 3 


2 Such ainhran^al ion may also be provided by the Attorney General, Acting Attorney General, find the Deputy 
Attorney General. See 50 U.S-.C. 5 IJMJltg). 

3 N&lhing 1ft this policy is intended IQ supersede nr replace existing policies for pros Kilters regarding notification, 
consultation, and approval for certain investitive and prosecutive steps, including consultation with other districts 

related matters mey be under investigation, Ftrf example, the United Stales Attorneys* Manual acts forth 
when a prosecutor must obtain prior approval for various court Klioos in national security prosecutions- See, eg.. 
United States Attorneys' Manual (US AM) S&SM.I3I (“Matters Assuiued by Criminal Division or Higher 

2 
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l Use or Disclosure of FISA toformatign Requirin g Consultation w ith FBI or other 

l^taaS^BmBttattJ^asu Bd >Wc ato-ta ,N$.P 

A. Certain investigative processes present only moderate risks, As a result, where 
FISA information is used or disclosed in connection with the processes described 
below, consultation with FBI (or other Intell igence Community agencies, as 
appropriate) 4 and notice to NSD is required; 

1 . Non-compulsory requests for third-party documents to corporations, 
institutions, and other providers of commercial services, including but not 
limited to communications service providers and financial institutions, that 
are neither the subject nor target of the national security investigation and 
from which there is no known substantial risk of improper discloaure. 

2. Grand jury subpoenas for third-party documents to corporations, 
institutions, and other providers of commercial services, including but not 
limited to communications service providers and financial institutions, that 
are neither the subject nor target or the national security investigation and 
from Which there is no known substantial risk of improper disclosure. 

3. Testimony before the grand jury by the custodian of records tor Such a 
subpoenaed party 

4. Pen registers or trap and trace devices under Title 18, Chapter 206, United 
Stales Code. 3 

B. Where FISA information is used or disclosed in connection with the processes 
described above,, the following notification process shall be followed; 

I . The federal prosecutor shall provide written ratification (see attached 
draft notification fomt), in a secure format, to NSp, 


Authority*); 9-2, 336 fldvestipiivt and PmseuitTive Polity fat Intern nkmAl Terrorism Matters'); 9*2.155 
("Sensitive 9-2.400 ("Prior Approved Ckt') 

* For foe purposes of this document, the lerm "imnlljgcttu Community agencies 11 refers fo the appropriate agencies 
within the Intelligence Community, including the Office of the Director oFNational Intelligence. Cdiuultflftien with 
lnteUigen.ee Community agencies other than the FBI is typically appropriate when the sources. method^ cr 
collections involve Intel Irgerjce Community agencies other than the FBI Prosecutors are encouraged to conteet the 
National Security Division, as needed, to assist with the eonsullalinm process with the FBI or other Intelligence 
Community agencies. 

3 Srnne courts require a significant measure of information with respect to applications for petl register or trap and 
trace devices. To the extent foal applications in such districts require the disclosure of additional FTSA information 
beyond the disclosure of the target phone numbwfs) or other identifiers relevant to the pen register or crap anti nace 
device, advance authorization as provided for in Section II of this policy is, required prior to such applications being 
made to the court. 
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2, As provided on the attached draft notification form, the federal prosecutor 
must indicate that he or she has consulted with the FBI’s Classified 
Litigation Support Unit (or other Intelligence Community agencies, as 
appropriate) with respect to the use or disclosure of the FISA information. 

3. Such notification must occur as early as possible — and where feasible, 
cither before or simultaneous to the use of the processes described 
above — to ensure that NSD complies with potential obligations to notify 
the Foreign Intelligence Surveillance Court, 

C. Where consultations with [he FBI (or other Intelligence Community agencies, as 
appropriate) demonstrate that the use of such processes is reasonably Likely to 
result in the compromise of an Investigation, or the FISA information was 
obtained or derived from particularly sensitive sources, methods, or collections, * 1 * * 4 * 6 
farther consultation that includes NSD (working with Intelligence Community 
agencies , as appropriate) shall take place prior to the use of such processes. 

1 . Where such further consultation takes place because of particularly 

sensitive sources, methods, or collections, NSD shall provide notice of 
such consultation to QDNL 

Cl This section does not permit the use or disclosure of FISA information obtained 
horn such processes in order to file criminal charges by complaint, information, 
or indictment, or in post-charge criminal proceedings/ Federal prosecutors must 
seek specific, separate use authority from the Assistant Attorney General for 
National Security prior to initiating any criminal proceedings. 


n. 


Assistant Attorney General for National . Security 


A. The advance authorization of the Assistant Attorney General for National Security 
is required where FISA information is used or disclosed in order to file criminal 
charges by complaint, information, or indictment, or h post-charge criminal 
proceedings, and before FISA information may be used or disclosed in connection 
with the processes discussed below. 


* The phrase "parficuiarLy Sensitive sources, methods, W collections,” as used herein, refers to (hose sources, 
methods, or collections Hum raise signi fieanC concerns to the FBI or other Intelligence Community agencies, as 
appropriate, beyond, those generally present in all activities conducted under FtSA. 

1 This .statement refers to FISA in formation obtained from processes la Section L A of ibis policy thai is. or thai (be 

prosecution teasonaibly expects may be, used as evidence Of discJoscd in any manner in a e nmplsint, information, or 

indictment, or h post -charge criminal proceedings. 
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1 . Investigative Processes Requiring Advance A uthor teat ion 

a. Certain investigative processes present potentially higher risks. As 
a result, authorization of the Assistant Attorney General for 
National Security is required before FISA information is used or 
disclosed in connection with (he processes described below: 

i. grand jury subpoenas, other than the non-testimonial third- 
party grand jury subpoenas of the type described above; 

ii. interception of communications under Title 1 8, Chapter 
119, United Stares Code; 

ill. accessing stored wire and electronic communications and 
transactional records under Title 18, Chapter 121 .United 
States Code; 

iv, search warrants under Rule 4 1 of the Federal Rules of 
Criminal Procedure; 

v, material witness warrants under 1 8 U.S.C, § 3144; 

vi , witness testimony before a grand jury, except as described 
above; or 

vii any investigative tool other than those described in this 
document, whose use in a particular investigation, in ihe 
view of the federal prosecutor, NSD, or the FBI (or other 
Intelligence Community agencies, as appropriate), would 
be reasonably likely to result in an compromise of the 
investigation, or in the compromise of particularly sensitive 
sources, methods, or collections. 

2 . Criminal Indictments and Past -Indictment Proceedings 

a. The use or disclosure of FISA information to file criminal charges 
by complaint, information, or indictment, or in post-charge 
criminal proceedings presents significant risks. As a result, the 
advance authorisation of the Assistant Attorney General for 
National Security is required before such use or dtsclosure. 

b, This advance authorization requirement applies to FISA 
Information that is, or that the prosecution reasonably expects may 
be, used as evidence or disclosed in any manner in a complaint, 
information, or indictment, or in post-charge criminal proceedings, 

& 
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3. Among the factory that will be considered with respect to grunting use 
authority art. (a) the importance of the information in a proceeding to 
disrupt a terrorist related operation, incapacitate the subjects, or create 
incentives for the subjects to provide intelligence; (b) the protection of 
intell igence sources, methods, and collections; (c) the impact on other 
proceedings or investigations; (d) FI5A l s statutory requirements, 
including the requirement that notice be given to a person who would be 
considered an “aggrieved person" under the statute and against whom 
FISA information is being used or disclosed; (e) the Government's 
compliance with the applicable minimization procedures authorized by the 
FISC; and (f) the litigation risks, including discovery issues, if any, 

4. Because the process of obtaining advance authorization will require H5D 
to coordinate with intelligence Community agencies, federal prosecutors 
should seek such advance authorization at the earliest juncture possible. 

In addition, because the use of such information will normally require 
declassification and consideration of issues related to sources, methods, 
and collections by the FBI and other intelligence Community agencies, 
federal prosecutors should work with the FBI and other Intelligence 
Community agencies prior to seeking such advance authorization, as 
appropriate. 

a. Prosecutors are encouraged to contact MSD at any dine in order to 
obtain guidance regarding this policy and to expedite resolution of 
any issues. 

b. Where advance authorization involving particularly sensitive 
sources, methods, or collections is requested, NSD shall provide 
notice of such request to ODNL 

Use itr Etsclosiire of FISA Information In Non-Criminal Proceedings 

A. The use or disclosure of FISA information in non-criminal proceedings may 

present varying levels of risk, Therefore, authorization of the Assistant Attorney 
General for National Security Of his designee ls required before such use or 
disclosure. 

I ■ For the purpose of this policy, the phrase “non-criminal proceeding* refers 

to any trial, hearing, or other proceeding in or before any court, 
department, officer, agency, regulatory body, or other authority of the 
United Slates that does not involve the potential imposition of a criminal 
Sanction, Cf. 50 U.S.C. § lfi06(c}; 50U&.C. § 1325(d). 
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2 , Among the factors that wi] I be considered with respect to granting use 

authority are: (a) the importance of the information in a proceeding to 
disrupt a terrorist related operation, incapacitate the subjects, or create 
incentives for the subjects to provide: intelligence; (b) die protection of 
intelligence sources, methods, and collections; (e) the impact on other 
proceedings or investigations; (d) FlSA‘s statutory requirements, 
including the requirement that notice be given to a person who would be 
considered an “aggrieved person" under the statute and against whom 
FISA information is being used or disclosed; (e) (he Government’s 
compliance with the applicable minimization procedures authorized by the 
FISC; and (f) the litigation risks, including discovery issues, if any, 

I . Because the process of obtaining advance authorization wi II requi re NSD 

to coordinate with Intelligence Community agencies, the attorney for the 
government should seek such advance authorization at the earliest juncture 
possible. In addition, because the use of such information will normally 
roquire declassification and consideration of issues related to sources, 
methods, and collections by the FBI end other Intelligence Community 
agencies, the attorney for the government should work with the FBI and 
other Intelligence Community agencies prior to seeking such advance 
authorization, as appropriate. 

a. Prosecutors arc encouraged to contact NSD at any time in order to 
obtain guidance regarding this policy and lo expedite resolution of 
any issues. 

b. Where advance authorization involving particularly sensitive 
sources, methods, or collections is requested, NSD shall provide 
notice of such request to QDNI 

This policy shall be reviewed one year bom its effective date to evaluate its 
effectiveness. 
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Classification: 

NOTIFICATION OF USE OR DISCLOSURE OF FISA INFORMATION FORM 

This form is to be used when notifying the National Security Division regarding ihc use or 
disclosure of information obtained or derived from collection authorized by the Foreign Intelligence 
Surveillance Act ofl97B (FISA), as amended, in accordance with Section I of the Attorney General's 
Revised Policy on the Use or Disclosure of FISA Information (relating to the ujse or disclosure of FISA 
information with respect to certain investigative processes). Federal prosecutors may notify the National 
Security Division by sending the completed form to: fisa,u5©@nsd. usdoj.sgov.gov (SECRET or below 
information only) or by secure faxing the form to 202-51 4-9262. A PDF-Tillable version of this form 
is available on SIPKnet in liSAO district folders on the “C;* drive of JCON-S under the sub- 
folder, CTS Resource Library , 

In addition, federal prosecutors are encouraged to contact at any time the NSD Office of 
Intelligence Litigation Section at (202) 514-5SG0, the Counterterrorism Section through the designated 
trial attorney Or the Regional AT AC Coordinator at (202) 5 14-0849, or the Counterespionage Section 
through the designated trial attorney or at (202) 51 4-1 1 S7. NSD duty attorneys can be reached after 
business hours through the DOJ Command Center at (202) 514-5000, 

Blank versions of this form are unclassified. Please add classification markings to the form 
according to the classification of the Information you provide. 

1 . Name of FIS A targets): 

2. FISA Court docket numbers for the orders authorizing the collection that produced (he 
information sought to be used or disclosed (list all): 


3. Nature of activity for which the FISA information will be used or disclosed [e.g. , 

investigative process (please specify type), criminal proceeding, non-criminal 
proceeding): , _ 

4. Title and court of proceeding ( jf applicable): 


5 , Target{ s) and subject^) of the investigation (list all) : 


6. USAO point of contact: 

Name: 

Telephone and Fax (unclassified and secure): 
E-mail address (unclassified and classified): _ 


Classification: 
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Classification: 


7 . NSD point(s) of contact (1 ist al I) : 

Namesfs); 


Telephone and Fax (unclassified and secure): 
E-mail address (unclassified and classified): _ 


B. Has consultation with PBI’s Classified Litigation Support Unit s National Security Law Branch, 
(202) 324-3951 (or other Intelligence Community agencies, as appropriate) taken place? 

9. Please identify the point of contact for FBi (or other Intelligence Community agencies, as 
appropriate): 


Name: 

Telephone and Fax (unclassified and secure): 

E-mail address (unclassified and classified): 

tO. Please provide a brief description or the nature of the investigation and also describe how FISA 
information will be used or disclosed (e.£., grand jury subpoena for telephone subscriber records, 
and credit card records): 


Elate: 

Submitted By 


Title 

Telephone Number 


Classification; 

2 
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APPENDIX F: (U) USE OF FORCE POLICY 

F.l (U) Use of Less-than-Lethal Devices 

(U) Deputy Attorney General's Memorandum on Use of Less-than-Leihal Devices dated 
4/21/2011. 

F.2 {U) Use of Deadly Force 

(U) Deadly Force Policy, dated 7/1/2004. 

F.3 [U) Training 

A) (U) Deadly Force Policy Training Material, dated 7/29/2004, 

B) (If) Instructional Outline and Use of Force Scenarios. 
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F.l (U) Use of Iess-than-Lethal Devices 

{U) Depuiv Attorney Ciencra] T s Memorandum un Use of LesLvthaji-Lolhal Devices dated 
4/21/201 L 
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MEMORANDUM KOR K obe rt & Mueller HI 
Dic^tof 

FcdcxMJ Buff au of Investigation 
Mittal* M. [«oiDan 

AdmmiHtPtor 

Druft Fftfi?K<rocrn Administration 

Kenneth E. Mtl«n 
Acting Director 

Bureau of Alcohol, Totacw. F*rc*rrn* wU Explosives 

Such A Hy(wn 
Director 

United Slates Mantals Sennet 


FROM : 


'nsotnaa R Kane 
Acting Director 
Federal Butch of Prison* 


James M. 

Deputy Afldnsft General 


SUBJECT: 


Attached 13 the [Jepunmcnl’s FoilfiJ on Ita Ldc of I fla-TKwt-I^lliat Devices, approved 
by x be Auawjr Gtflernl on April 2t . 10J 1 , Plfaie eiuure itor dls policy it diitrtbuaad to every 
sflected employee within yOuf rartponeM. 


Avtadsrment 
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I. Departnwnt 9 f Jmiict 1DOJ} law enforcement officers 

|flCticf»| ir* authorized to use leas-than-lethal device a 
only as consistent with this policy aEatonwnt, 

E(, Pursuant to this policy statement, less- than- lethal 
da-vices i 

a . Are ayn-onyaeus with Mesa SeEhai, H "tion-lethal, " "ron- 
desdiy, *■ and other terms referring za devices tiled in 
situetiojii covered by this policy statement; and 

B. Include, but Sr* not limited to: 


1, impact Device a <e, g , , batons, bean bag 

projectiles, baton launcher , rubber project! lee, 
stinkballs | j 

3. Chemical Agent i fe.g, , tear gas, pepper spray, 
peppcrbal 1*1 I and 

1. Conducted Energy Devices ! e. q ., electronic 

umofci Illation , control, and restraint devicesj . 


HI, KW officers ace authorised to jae i*s*- than- lethal devices 
only in those situations where reasonable force, bflafrd Oii 
the totality of the ci tcumaLantes at the time of the 
incident, is neceasary to effectuate an arrest, obtain 
lawful conpllance from a subject, or protect any person 
from physical harm. Das of lass-than- lethal devl cri most 
cease when it is no longer necessary to achieve the law 
enforcement abjective- 

*V. DO J officers are authorised to use only those leas -than- 

lethal device! authorised by their component end that they 
aft trained to use* absent exigent circumstance* . 

V. DOJ officers ape not authorised to us* Isas -than- lethal 
devices If voice commands or physical coctroi achieve the 
law enforcement objective* DOJ officer! ac# prohibited 
Tran using loes-than- lethal devices to punish, harass, or 
abuse any person, 

VI , Le s* -than- lethal devices *r 4 used with a ceasonsble 
expectation that death or serious bodily Injury will not 
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result. Th«y art, hdwve c , recognised aa having the 
pn’L*n r .LiL La cause death oc serious bodily injury, er.d DOJ 
officer! My jie liu-thtn-Ulh*! » deadly weapons 

onl y when authorised under the WJ Polity Statement on the 
Va« of Deadly force, 

VII. DOJ of fit b ta but iuKe necessary medical assistance 

aval I able to Subject a of lea a -chan-lethal device uae «j 
a ban. as ptacticable . 

VIII . DOJ campone n t a Bust establish rules and procedure! 

Implementing this policy statement. Each component will 
ensure that state /local a E Cl ear a participating In joint 
teak force operations art aware of and adhere to the policy 
and its limits on DOJ officers, 

IK. DOJ components must establish, training programs and 

procedures for using laas-than-iathal devices that are 
consistent with this policy statement and federal law. 

X. DOJ components must Individually establish procedure! for 
documenting, reporting, reviewing, and investigating |ai 
warranted), ail incident a involving the un# of 1 e e •- then- 
lethal devices. 

XI r This policy statement Is net Intended to, &hd does not, 
create any right or benefit, substantive or procedural, 
enforceable at lew or in equity, against the Dnited States, 
Its departments, agencies, or other entitles, Its officers 
or employees, or any other person. 
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F.2 (U] Use of Deadly Force 

(U> Deadly Force Policy, dated 7/1/2004. 
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POLICY STATEMENT USE OF DEADLY FORCE 

GENERAL PRINCIPLES 

I. Law enforcement officers and correctional officers of 

the Department of Justice may use deadly force only when 
necessary, that is, when the office has a reasonable 
belief that the subject of such force poses an imminent 
danger of death or serious physical injury to the 
officer or to another person, 

A. Deadly force may not be used solely to prevent 
the escape of a fleeing suspect. 

B. Firearms may not he fired solely to disable 
moving vehicles, 

C. If feasible and if to do so would not increase the 
danger to the officer or others, a verbal warning to 
submit to the authority of the officer shall be given 
prior to the use of deadly force. 

D. Warning shots are not permitted outside of the prison 
context . 

E. Officers will be trained in alternative methods and 
tactics for handling resisting subjects which must be 
used when the use of deadly force is not authorized 
by this policy, 

CUSTQDIAL , SITUATI ONS 

II. Unless force other than deadly force appears to be 
sufficient, deadly force may be used to prevent the escape of 
a prisoner committed to the custody of the Attorney General 
or the Bureau of Prisons 

A, if the prisoner is effecting his or her escape in a 
manner that poses an imminent danger to the safety of the 
officer or another person; or 

B. if the prisoner is escaping from a secure facility or is 
escaping while in transit to or from a secure facility. 

III. If the subject is in a non- secure facility deadly force may 
be used only when the subject poses an imminent danger of 
death or serious physical injury to the officer or another 
person . 
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IV. If the subject is in transit to or from a non- secure 
facility and is not accompanied by a person who is in 
transit to or from a secure facility, deadly force may be 
used only when the subject poses an imminent danger of death 
or serious physical injury to the officer or to another 
person. 

V. After an escape from a facility or vehicle and its immediate 

environs has been effected, officers attempting to apprehend 
the escaped prisoner may use deadly force only when the 
escaped prisoner poses an imminent danger of death or serious 
physical injury to the officer or another person. 

VI . Deadly force may be used to maintain or restore control of a 
prison or correctional facility when the officer reasonably 
believes that the intended Subject of the deadly force is 
participating in a disturbance in a manner that threatens the 
safety of the officer or another person, 

VII. In the prison context, warning shots may be fired within or in 
the immediate environs of a secure facility if there is no 
apparent danger to innocent persons: (A) If reasonably 
necessary to deter or prevent the subject from escaping from a 
secure facility or (B) if reasonably necessary to deter or 
prevent the subject's use of deadly force or force likely to 
cause serious physical injury. 
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VIII, This Policy is not intended to, and does not, create any 
right or benefit, substantive or procedural, enforceable at law 
or in equity, against the United States, its departments, 
agencies, or other entities, its officers or employees, or any 
other person. 
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F.3 [U) Training 

A) (U) DsadJy Force Policy Training Material, dated 7/29/2004. 
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FEDERAL BUREAU OF INVESTIGATION 


Precedence ; ROUTINE Date: 07/23/2004 

lot All Divisions Attn: AD 

ADIC 

SAC 

CDC 

PFI 

FBI HQ, Manuals Desk 
FBI HQ, Manuals Desk 

From: General Counsel 

Legal Instruction Unit 

Contact: Lisa A. Baker, 703/632-3137 

Approved B y, Caproni Valerie E 
Kelley Patrick W 

Drafted By: Baker Lisa A 

Case ID #i 66F-HQ- 13122B3 
66F-HQ-C13B4970 
66F-HQ-C13B4570 

Title t REVISIONS TO THE DEPARTMENT OF 
JUSTICE DEADLY FORCE POLICY - 
DISSEMINATION OF TRAINING MATERIALS 

Synopsis: This Electronic Communication (EC) provides recipients 
with training materials incorporating the revisions approved on 
July 1, 2D 04 to the Department of Justice (DOJ) Deadly Force 
Policy . 

Reference: 66F^HQ-13122S3 Serial 3 

Enclosure (s) : One copy of an instructional outline and one copy 
of use of force scenarios provided to all recipients for training 
purposes , 

Details: As discussed in the referenced EC, dated 7/7/2004, on 

July 1, 2004, the Attorney General approved a revised Policy 
Statement on the use of Deadly Force, In order to assist Field 
Offices in providing training and guidance on the practical 
application of the Deadly Force Policy in light of the revised 
language, the Legal Instruction Unit (LIU}, Office of the General 
Counsel, revised training materials used with the prior Policy 
Statement to reflect the changes approved by the Attorney 
General . 
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To: All Divisions From: General Counsel 
Re: 66F -HQ- 13122 53, 07/23/2004 


The training materials consist of an Instructional 
Outline and a set of 13 factual scenarios with a discussion of 
the use of force within the scenario and whether its use violates 
the policy. This material is similar to what was used for 
instructional purposes since 12/1/1935. The revised material 
reflects what was noted in the EC, that the revised policy does 
not expand or contract the current justification for the use of 
deadly force. Nonetheless , revisions to the training materials 
were necessary in order to describe the application of deadly 
force consistent with the new more succinct policy statement. 

The revisions to the training materials primarily 
relate to the elimination of the 11 safe alternative" 1 language as a 
function of the "necessity" for use of deadly force and 
elimination of language addressing the use of deadly force to 
prevent the escape of a fleeing felon. For a more detailed 
discussion of the nature of the revised Policy Statement and the 
basis for these revisions, refer to the referenced EC. 


F-11 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Vera ton, Doted: 
October 15, 201 1 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Invfcsljgalkins aod Operations Guido 
Toi All Divisions From: General Counsel 
Re: 66F-HQ-13122S3, 07/29/2004 


LEAD {e} t 

Set Lead 1 t (Action) 

ALL RECEIVING OFFICES 

It is requested that this communication be distributed 
to all appropriate personnel * 


+* 
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DEADLY FORCE POLICY 
TRAINING MATERIAL -7/29/2004 

DEPARTMENT OF JUSTICE DEADLY FORCE POLICY * 


Law enforceinont officers of the Department of Just ice siiny use deadly force only 
when accessary, that is, when the officer has a reasonable belief thai the subject of such 
force poses an imminent danger of death or serious physical injury to the officer or to 
another person. 

A* Deadly force may not be used solely to prevent the escape of a fleeing 
suspect. 

FL Firearms may not he fired solely in disable moving vehicles. 

C. If feasible and to do so would not increase the danger to the officer or 
others, a verbal warning to submit to the authority of the officer shall be 
given prior to the use of deadly force, 

D. Warning shots are not permitted 1 

E. Officers will he trained in alternative methods and tactics for handling 
resisting subjects which must be used when the use of deadly force is not 
authorized by this pulley . 

This policy is not intended to. and docs not* create any right or benefit, substantive 
or procedural, enforceable &l law or in equity, against the United States, its departments, 
agencies, or other entities, its officers or employees, or any other person. 


’Department of Justice Policy Statement Uscot'DcadN Force (07/01 /2G04) in pertinent part (Language 
relating to Custodial Snualitttis ha* been intentionally omitted puniuanl to FBI polity- Se£ r 66F-HQ- 13 12253. EC 
from the Director's Office lu All Divisions, titled "REVISIONS TO THE DEPARTMENT OF JUSTICE 
DEADLY FORCE POLICY", elated 07/OT.3M*). 


■Not included in the above description is the policy relating Go the use of deadly three iu prevent the escape 
of a prisoner cQtntmtled to die custody of the Attorney General or ihe Bureau of Prisons, Because Agents will 
seldom find themselves in. a position, to apply die custodial aspect of ihe policy, the FHI will adhere to the policy 
decision set forth in the Aind from the Director to All Field Offices, tided "Deadly Forte Policy Mailers," dated 
L/S/95. which stales "A policy decision has been made that except in caxes of prison ntinssi which would principally 
involve HRT and/or SWAT, FBI Agents should adhere to Ihc policy and training principles governing the use nf 
deadly force in noncustodial situations. 
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F.3 (U] Training 

BJ (LF) InstmclioTial Outline and Use of Force Scenarios. 
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I. INTRODUCTION 

The following general principles, shall guide the interpretation and application of this 
policy: 

A. This policy shall not be construed to require Agents to assume 
unreasonable risks to themselves. 

B. The reasonableness of an Agent's decision to use deadly force must be 
viewed from the perspective of the Agcru on the scene without the 
benefit of 20/20 hindsight. 

C. Allowance must be made for the fact that Agents are often forced to 
make split-second decisions in circumstances that are tense, uncertain, 
and rapidly evolving. 

II. . DEFINITIONS 

A. "DEADLY FORCE": Is force that is reasonably likely to cause death or 
serious physical injury. 

B. "REASONABLE BELIEF": Is synonymous with "Probable Cause". It is 
determined by a totality of the facts and circumstances known to Agents 
at the time, and the logical inferences that may be drawn from them. 

C- "NECESSARY": The necessity to use deadly force based on the 
existence of a reasonable belief that the person against whom 
such force is used poses an imminent danger of death or serious physical 
injury to the Agent or other persons. 

D. "IMMINENT DANGER"; ''Imminent 1 ' does not mean ''immediate" or 
"instantaneous' 1 , but that an action is pending. Thus, a subject may pose 
an imminent danger even if he is not at that very moment pointing a 

weapon at the Agent. For example, imminent danger may exist if 
Agents have probable cause to believe any of the following: 
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] , The subject possess a weapon, or is attempting 10 gain access 
So a weapon, under circumstances indicating an i men lion to 
use it against the Agents or others; or, 

2, The subject is armed and running to gain the tactical 
advantage of' cover; or, 

}. A subject with she capability of inflicting death or serious 
physical injury-or otherwise incapacitating, agents- without a 
deadly weapon, is demonstrating an intention to do so; or, 

4, The subject is attempting to escape from the vicinity of a 
violent confrontation in which the suspect inflicted or 
attempted the infliction of death or serious physical injury. 

til application of deadly force 

In assessing the necessity to use deadly force, the following practical considerations arc 

relevant to its proper application: 

A. Inherent Limitation on Abilities to Assess the Threat and Respond. 

! . Limited Time f Action v. Reaction ) - there will always he an interval of lime 
between a subject's action and an Agent's ability to perceive that action, to 
assess its nature, and to formulate and initiate an appropriate response. 

The inherent disadvantage posed hy the act ion.' reaction factor places a 
significant constraint on the time frame within w hich Agents must perceive, 
assess and react to a threat, 

2. Li mi led Means {Wound Ballistics) - When the decision is made to use deadly 
force. Agents have no gupra nfred means of instantaneously stopping the 
Threat. The human body can sustain grievous - even ultimately fatal - injury 
and continue to function for a period of time (from several seconds to several 
minutes) depending on the location, number, and severity of the wounds. The 
lack of a reliable means of instantaneously stopping the threat, may extend the 
t i me that imminent danger can persist. This factor further constrains the time 
frame within which Agents must respond to a perceived threat. 

B. Achieving Intended Purpose. 

I . Deadly force may only be applied for the intended purpose of bringing an 
imminent danger of death or serious physical injury to a timely halt either 
through I be surrender of the subject or through physiological incapacitation. 
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3f the subject does not surrender, the only rcliabfe means of achieving that 
goal is to cause physiological incapacitation of the subjects) as quickly as 
possible. Attempts to do anything else - such as shooting to cause minor 
injury - are unrealistic and can risk exposing Agents or others to continued 
danger of death or Serious physical injury. 

2. When the circumstances justify the use of deadly force. Agents should 
continue its application until the imminent danger is ended through the 
surrender or physiological incapacitation of the subjects). 

C, Consideration of Risk to Other Parlies. 

Even when deadly force is permissible, Agents should assess whether its 
use creates a danger to third parties that outweighs the likely benefits of 
its use. 
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SCENARIO #1: ARMED, RESISTING 


Agents approach a residence at night to arrest a bank 
robbery subject. The robbery occurred 3ix weeks earlier, 
and the robber threatened bank personnel with a handgun. 
Agents gp to the front door of the house while others cover 
from their assigned positions. One Agent gains a view of 
the lighted interior of the house through an uncurtained 
window. When the Agents at the front door knock and 
announce their identity and purpose, the Agent watching 
through the window sees a man matching the description of 
the subject pick up a rifle and approach the door with gun 
in hand. The Agent fires through the glass, striking the 
subject in the back and side. 


DISSCUSSION i The use of deadly force is permissible 

Deadly force is necessary to eliminate the 
imminent danger to the other Agents. The subject 
armed himself with a deadly weapon after the 
Agents had announced their identity and purpose ; 
it is reasonable to believe that he has armed 
himself in preparation for violent resistance. 
Verbal warnings are not feasible due to the 
imminent nature of the threat. 
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SCENARIO #2: ARMED , RESISTING 


An undercover Agent purchases three kilos of cocaine 
from two subjects seated in an automobile in a deserted 
parking lot at about 3; 00 A.M, Through a pre-arranged 
signal H the Agent alerts a nearby team of Agents to move in 
and arrest the subjects. As the arrest team approaches on 
foot and the Agents on the team identify themselves as law 
enforcement officers and demand that the subject's place 
their hands where they can see them, the subjects' car 
suddenly veers toward them with the apparent intent to 
strike them. The Agents open fire, striking the driver. 


DISCUSSION: The use of deadly force is permissible 

It is reasonable for the Agents to believe the 
subjects pose an imminent danger to the Agents by 
using the vehicle as a deadly weapon , rather than just 
as a means of escape. Unlike the situation where a 
subject is using a vehicle merely to escape, the 
Vehicle in this scenario is being used as a weapon to 
attack the Agents. A vehicle used in this manner 
poses no less an Imminent danger than a firearm or 
Dther weapon, and deadly force is permissible to 
protect the Agents and others in the vicinity. 
Furthermore, Agents would not be required to permit 
the subjects to escape from the vicinity of a violent 
confrontation in which they have just attempted to 
inflict death or serious physical injury on the 
Agents. Verbal warnings were given before the Agents 
opened fire, but were ignored. Obviously, Agents 
confronted with a threat from an approaching vehicle 
should take evasive action to avoid getting killed or 
seriously injured; but the same may be said when 
Agents are confronted by subjects with knives or 
firearms. Because the vehicle wag being used to 
attempt to kill or injure the Agents, it is not 
necessary that there be another threat or danger 
before the use of deadly force is permissible* 
Attempting to counter the danger by disabling the 
vehicle is impractical and contrary to policy. Thus, 
when deadly force is deemed necessary, it must be 
directed at the person or persona who pose a danger. 

As in all other instances where the use of deadly 
force is at issue, consideration must be given to 
whether its use creates a danger to third parties that 
outweighs its benefits. 
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SCENARIO #3: NON - DANGEROUS , ESCAPING 


Agents possess an arrest warrant for a man who is 
wanted for Bank Fraud & Embezzlement , As they approach his 
residence to- make the arrest, they observe a man matching 
the subject's description standing on the front porch. 

When the Agents are within about 2.0 yards of the residence, 
the man looks in their direction and immediately jumps from 
the porch and runs down the sidewalk away from them. One 
of the Agents shouts, "FBI! Stop]' 1 ' When the man ignores 
that command, the Agent shouts a second time, "FBI l Stop or 
I r ll shoot E w The man continues running, increasing the 
distance between himself and the pursuing Agents. 

Realizing that they are not going to be able to overtake 
the him, the Agent fires a shot, striking the man in the 
back. 


DISCUSSION: The use of deadly force violates policy 

Deadly force may only be used when 
necessary, that is when Agents have a reascnable 
belief that the subject of the force poses an 
imminent danger of death or serious physical 
injury. In this scenario, it is not reasonable 
to believe that the subject poses an imminent 
danger to the Agents or to others. If the Agents 
are unable to seize the subject without resort to 
deadly force, the subject will avoid arrest for 
the time being. 
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SCENARIO #4: ARMED, ESCAPING 


Agents approach a residence during the day to arrest a 
bank robbery subject who threatened bank personnel with a 
handgun during the robbery. Before the Agents are able to 
fully establish a perimeter, a person matching the 
description of the subject bursts from the back door of the 
residence with what appears to be a pistol in his hand and 
runs through the back yard towards adjacent homes. Agents 
shout, "FBI! Stop! Or we' LI shoot!" Ignoring the commands, 
the subject continues to run. An Agent fires a shot from a 
distance of about 15 yards, striking the subject in the 
back . 


DISCUSSION: The use of deadly force is permissible 

The Agent has probable cause (reasonable 
belief) that the subject, who has armed himself 
with a firearm, has done so to resist arrest and 
poses an imminent danger to the Agents in the 
immediate vicinity. The subject ignored commands 
to stop. As long as the fleeing armed subject 
remains within gunshot range of the Agents, he 
has the ability to turn and fire upon them before 
they can effectively respond by taking cover or 
returning fire. Attempting to pursue an armed 
subject increases that danger. In addition, the 
subject poses an imminent danger to those Agents 
who are trying to form the perimeter and whom the 
subject is likely to encounter as he continues 
his flight. 

In deciding whether to use deadly force in 
this scenario, Agents should also consider that 
the suhject is fleeing in a neighborhood setting* 
Accordingly, Agents should assess whether its use 
creates a danger to third parties that outweighs 
the likely benefits of its use. 
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SCENARIO #5: ARMED , RESISTING 


An undercover Agent, posing as a fence for stolen 
property, is purchasing explosives and ammunition believed 
to be stolon from a military base* The subject arrives at 
the rendezvous, shows the merchandise and asks to see the 
money. When the Agent shows the money, the subject 
suddenly pulls a handgun and says, * 1*11 take that." The 
Agent hands over the money, and raises his hands. As the 
subject backs toward his truck, backup Agents emerge from 
their places of concealment, identify themselves as FBI 
Agents, and order the subject to drop the gun. The subject 
quickly glances in. the direction of the Agents, but 
continues to point the gun in the direction of the 
undercover Agent. The backup Agents fire. 


DISCUSSION: The use of deadly force is permissible 

There is a reasonable belief that the armed 
subject poses an imminent danger to the 
undercover Agent from the moment the subject 
draws his handgun. Immediate action is necessary 
to protect the undercover Agent. Given the 
immediacy of the threat, the use of deadly force 
would be permissible when the subject drew his 
weapon + 
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SCENARIO #6: UNARMED „ RESISTING 


Agents attempt to execute an arrest warrant on a Fraud 
by Wire subject in the break room of a manufacturing plant 
where he works* The subject, a man of average size with no 
history of violence, is wearing pants and a shirt, and 
there is no indication that he is armed. When the Agents 
identify themselves and approach the subject, he suddenly 
exercises a precise karate kick, striking one of them in 
the groin and temporarily disabling him. One of the Agents 
backs away, draws his handgun, and orders the subject to 
surrender. The subject ignores the commands, adopts a 
martial arts fighting stance, and moves toward the Agent. 
The Agent fires. 

DISCUSSION: The use of deadly force is permissible 

It is reasonable for the Agents to believe 
that the subject is posing an imminent danger of 
death or serious physical injury to the Agents by 
his attack. The subject is nat only capable of 
inflicting death or serious physical injury 
through his martial arts skills, but he also has 
the Capacity to render the Agents incapable of 
defending themselves. The subject's refusal to 
comply with the Agent" s command to surrender, his 
disabling attack upon one Agent, and his apparent 
intention to attack another, creates a reasonable 
belief that he poses an imminent threat of death 
or serious physical injury, justifying the use of 
deadly force to eliminate that threat. In the 
face of the imminent danger, Agents are not 
required to assume the risk of being 
incapacitated as a result of a physical 
confrontation with the subject, rendering the 
Agents incapable of protecting themselves and 
making their firearms accessible to the 
assailant . 
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SCENARIO #7: UNARMED, RESISTING 


Agents attempt to execute an arrest warrant for an 
Unlawful Flight to Avoid Prosecution {UFAFJ- Murder subject 
in the break room of the manufacturing plant where the 
subject works. They approach the subject and announce 
their identity and purpose. There is no reason to believe 
that he is presently armed with a deadly weapon. However, 
as soon as the Agents attempt to effect the arrest, the 
subject spits in the face of one of Agents, then grabs a 
nearby supporting column, wrapping it with his arms and 
legs. The Agents try to peel the man away from the column, 
but without success, The subject continues to spit and 
curse at the Agents. One Agent draws his handgun and 
informs the subject that if he doesn't let go of the column 
and surrender by the count of ten, he will be shot . The 
subject ignores the commands and continues cursing the 
Agents. At the count of ten the Agent fires. 


DISCUSSION; The use of deadly force violates policy 

It is not reasonable for the Agents to 
believe that the subject poses an imminent threat 
of death or serious physical injury to the Agents 
at present. Policy requires that they use non- 
deadly force to resolve this situation. This 
does not suggest that they should view the 
subject as harmless or as one who could not 
become a threat. As with any suspect or 
arrestee. Agents must be alert to the possibility 
that an imminent danger of death or serious 
physical injury may arise; but until such time as 
it does, deadly force is not an option. 


F-24 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


Version Dated 
Ortflfter 15. 201 1 



UNCLASSIFIED- FOR OFFICIAL USE ONLY 
Domestic Investlgallons end dpefallfins Cu*tie 


SCENARIO #£: DANGEROUS , ESCAPING 


FBI Agents are looking for a fugitive who jumped bail 
rather than face trial for distribution of cocaine. Two 
Agents go to the residence of the ex-wife of the fugitive, 
hoping to interview the woman about her former spouse * s 
present address. As the Agents approach the house from the 
street, the fugitive emerges from the front door, sees the 
Agents and draws a handgun from the waistband of his pants . 
The Agents take cover behind the ears parked at the curb, 
draw their weapons and shout, 11 FBI ! Put your hands up 1 " 

The fugitive opens fire, and begins to run across the front 
yard to get away* As the fugitive turns the corner of the 
house he trips over a bicycle and is seen to lose his gun* 
Regaining his feet, he runs along a driveway toward the 
back yard and begins to climb a chain link fence* One of 
the Agents yells for him to stop. When the fugitive 
ignores the command and continues to climb, the Agent fires 
a Shot Striking the fugitive. 


DISCUSSION: The use of deadly force is permissible 

It is reasonable for the Agents to believe 
that the subject of the force poses an imminent 
threat of death or serious physical injury* The 
Subject's efforts to escape from the vicinity of 
a violent confrontation in which he inflicted or 
attempted infliction of death or serious physical 
injury supports a reasonable belief that he poses 
an imminent danger of death or serious physical 
injury to the Agents or others. Moreover, the 
subject has demonstrated his dangerousness by 
firing upon the Agents. Even though the fugitive 
was seen to have lost his gun, the Agents should 
consider the possibility that the suspect 
possesses another weapon. Agents are not 
required to pursue a demonstrably dangerous 
subject who hag just attempted to kill them. The 
subject ignored commands to surrender. It is 
neither safe nor reasonable to require Agents to 
attempt to physically overpower a person who has 
demonstrated that he will use violence to avoid 
capture. To do so exposes the Agents' firearms 
to the subject and the Agents to unnecessary- 
risk. 
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SCENARIO #9: ARMED, RESISTING 


Agents have a warrant to arrest a man for a bank 
burglary that occurred several weeks previously. Unable to 
locate the subject at his apartment, they go to a nearby 
garage where he works as an auto mechanic. The Agents 
approach the subject, identify themselves, and tell him 
that he is under arrest. The subject glares at the Agents 
for a moment and then suddenly hurls a wrench at them which 
they manage to dodge. The subject then removes a small 
canister from a nearby bench and shouts r "If you guys don't 
get out of my way I f ll mace you!" The Agents hold their 
positions about 30 feet from the subject, draw their 
handguns and order the subject to drop the canister. The 
subject does not comply with the command, but continues to 
point the canister in the Agents' direction as he moves 
toward them. When the subject is within about 20 feet of 
the Agents, they fire, striking the subject in the chest* 


DISCUSSION: The use of deadly force is permissible 

It is reasonable for the Agents to believe 
that the subject poses an imminent threat of 
death or serious physical injury to the Agents by 
his violent resistance to arrest with what 
appears to be a chemical agent* A non-compliant 
subject who has the capability of rendering 
Agents incapable of defending themselves also has 
the capacity to gain access to the Agents' 
weapons and to kill or seriously injure them. 

The Agents commanded the subject to drop the 
Canister and surrender; he refused to do so, and 
increased the danger to the Agents by advancing 
toward them in a threatening manner* The Agents 
are not required to retreat from their duty or to 
permit the subject to get close enough to use 
what is believed to be an incapacitant against 
them. 


UNCLASSIFIED - FOR QFFOW. USE ONLY 


Vafwcn Dated 
October- 15, Mil 


UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic Inwwligalians and Operations Guide 


SCENARIO #10: UNARMED , NON -DANGEROUS t ESCAPING 


Agents possess a warrant to arrest a man for 
Interstate Transportation of Obscene Material. The Agents 
go to the subject 1 s residence to execute the warrant. As 
they walk up the walkway to the front door, they hear the 
noise of a door slamming from the rear of the house, and 
they see a man matching the description of the subject 
running from the back of the house toward nearby woods. 

The Agents immediately give chase, but are unable to close 
the gap. Finally, one of the Agents shouts, "-FBI I Stop or 
we'll shoot’" When the subject continues to flee, the 
Agent draws his handgun and fires a shot into the air. The 
subject continues to run, and just before he disappears 
into the woods, the Agent fires a second shot, striking the 
subject in the back. 


discussion: The use of deadly force violated policy 

The use of a warning shot violated policy 

It is not reasonable for the Agents to 
believe that the subject of the force poses an 
imminent threat of death or serious bodily 
injury* Deadly force is not permissible solely 
to prevent the escape of an individual. The 
subject in this scenario merely appears to be 
attempting to escape. Furthermore, the warning 
shot fired by one of the Agents violates the 
deadly force policy. If non-deadly force is not 
successful in effecting the subject'' s arrest, he 
will avoid arrest for the time being. 


F-27 

unclassified - for official use. only 


Version Dated. 
October 15, 20tt 


UNCLASSIFIED - FOfi OFFICIAL USE ONLY 
Dojusslic invaatigalHins and Operalians Guide 


SCENARIO #11: DANGEROUS , ESCAPING 


Agents attempt to execute arrest warrants on two 
subjects who have committed a series of bank and armored 
car robberies during which they killed or injured several 
people. The subjects immediately engage the Agents in a 
firefight during which two Agents are killed and five 
others are seriously injured. The two subjects, both of 
whom have also sustained gunshot wounds but are not 
incapacitated, attempt to escape in a nearby Bureau car. 

One of the Agents, himself seriously wounded, fires several 
shots into the passenger compartment of the vehicle, 
striking and killing the two subjects. 


DISCUSSION i The use of deadly force is permissible 

It is reasonable for the Agents to believe 
that the subjects of the force pose an imminent 
threat of death or serious physical injury. The 
subjects are fleeing the scene of a violent 
confrontation in which they have inflicted or 
attempted the infliction of death or serious 
physical injury. It is reasonable for the Agents 
to believe that as they attempt to escape the 
scene of that violent confrontation, they will 
continue to pose an imminent danger of death or 
serious physical injury to the Agents or others. 
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SCENARIO #12 ; ARMED , ESCAPING, RISKS TO OTHERS 


Agents respond to an alarm indicating a bank robbery 
in progress* When they arrive on the scene, they observe a 
masked individual running from the bank with what appears 
to be a gun in his hand. The Agents identify themselves 
and order the subject to stop. In response., the subject 
fires two shots in the direction of the Agents. As the 
Agents dive for cover, the subject flees into a nearby 
crowded restaurant* An Agent pursues the subject, and from 
the entrance to the restaurant sees the subject making his 
way through the crowd toward the rear exit* The Agent 
fires at the subject, 

DISCUSSION; The use of deadly force violates policy 

It is reasonable to believe that the subject 
poses an imminent danger of death or serious 
physical injury* The subject is attempting to 
flee the scene of a violent confrontation where 
he just inflicted or attempted the infliction of 
death or serious physical injury* However, the 
firing of the weapon by the Agent into a crowded 
restaurant creates an unreasonable danger to the 
public that is not outweighed by the likely 
benefits. The Agents presented with that 
unreasonable risk to the public must permit the 
subject to escape. In considering the 
availability of other options, Agents are 
reminded that pursuing an armed and dangerous 
subject under the circumstances presented poses 
an unreasonable risk to the Agents and, under the 
policy, Agents are not required to assume 
unreasonable risks. 
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SCENARIO #13; ARMED, DANGEROUS, ESCAPING 


Agents are involved in executing an arrest warrant on 
a man who has committed a aeries of bombings over a period 
of years resulting in several deaths and serious injuries. 
There ia no information to suggest that the subject carries 
firearms or other weapons. When the Agents approach the 
subject, he sees them from a distance of about 25 yards and 
quickly turns and runs in the opposite direction. The 
Agents shout, "FBI i Stop I" Ignoring the commands, the 
subject continues to run. When if becomes apparent that 
the Agents cannot overtake the subject, one Agent again 
shouts, "FBI! Stop or I'll shoot 1 ." When the subject 
continues his flight, the Agent fires two rounds, striking 
him in the back. 


DISCUSSION: The use of deadly force violates policy 

Although the subject' 3 prior crimes justify 
the belief that he is dangerous, it is not 
reasonable to believe that he poses an imminent 
danger to the Agents or to others as defined 
under the deadly force policy. Neither the 
egregious nature of his crimes nor the 
probability that he will continue his dangerous 
acts unless captured satisfies the imminent 
danger requirement of the policy. In the absence 
of an imminent danger, deadly force is not 
justified. 
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SCENARIO #14: ARMED , DANGEROUS 


Agents pos&ess a warrant to arrest a subject for armed 
robbery of a bank the day before. During the robbery, the 
subject shot and wounded a bank guard. As the Agents drive 
into the neighborhood where they believe the subject 
previously resided, they observe a man matching the 
subject's description walking down the sidewalk. From a 
distance of about 25 yards the Agents see what appears to 
be a handgun tucked into the waistband of the subject's 
pants. Getting out of their cars, the Agents walk toward 
the subject. When they are about 10 yards from the 
subject, one of the Agents shouts, "FBI! Put up your 
hands! We have an arrest warrant!" Following a quick 
glance in the direction of the Agents, the subject turns 
and runs away from the Agents and toward a nearby house. 

The Agent shouts, "FBI! Stop or I r ll shoot I " When the 
subject continues to run, the Agent fires at the subject* 


DISCUSSION: The use of deadly force is permissible 

It is reasonable to believe that the subject 
of the force poses an imminent threat of death or 
serious physical injury to the Agents or others 
he may encounter. The Agents have a reasonable 
belief that the subject that they are attempting 
to arrest is presently armed with a firearm. If 
the subject reaches the house under that 
circumstance, he will have the tactical advantage 
of cover, whereas the Agents are in an exposed 
position. In addition, the subject poses a 
danger to other persons in the house whom he may 
take as hostages or otherwise injure. The nature 
and imminence of the danger permits the use of 
deadly force under those circumstances. Since 
permitting the subject to enter the house would 
place the Agents and others in imminent danger, 
deadly force is permissible. 
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APPENDIX G: [U) CLASSIFIED PROVISIONS 

{U} See the separate classified DIOG Appendix G . 
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APPENDIX H: (U) PRE-TITLE HI ELECTRONIC SURVEILLANCE 
(ELSUR) SEARCH POLICY 

H.l (U) Scope 

(U) IS U.S.C. § 25 1 8| 1 )(e) requires that each application for an order to intercept wire, oral, or 
electronic communications (hereinafter "Title IIF) contain a statement describing all previous 
applications for Title ill surveillance of the same persons, facilities, or places named in the 
current application. The below policy is designed to conform with this statutory requirement, 
clarify any past confusion, and address the effects on the previous search policy resulting from 
the recent elimination of the requirement for an agency Action Memorandum by the Office of 
Fnforccment Operations tGEO). This policy supersedes the March 5. 2003 Director's 
Memorandum to All Special Agents in Charge Re: Pre-Title Til Electronic Surveillance 
(ELSUR) Search Policy, and the April 14. 2008, All Field Offices EC from RMP. Case ID* 
32IB-HQ-CI 186238. 

H.2 (U} Revised Policy 

H,2,l (U) Compliance With The Previous Application Provision 

(U) 18 U.S.C. § 2518(1 1(e) requires that each application for an order to intercept wire, oral, or 
electronic communications (hereinafter "Title II H contain a statement describing all previous 
applications tor Title III surveillance of the same persons, facilities, or places named in the 
current application. Although a failure to comply with $ 25 1 S( 1 )(e) will not always result in 
suppression of evidence, deliberate noncompliance likely with 

(U) To comply with Ihis requirement, FBI search policy requires that a “search," i.e., an 
automated indices search, of the FBI’s ELSU R Records System (ERS) be conducted prior to 
filing a Title III affidavit and application with the court. To assist field offices in conducting 
appropriate searches, the following guidelines are provided, 

H.2. 1.1 (U) When To Search 

A) (U) ELSUR SEARCHES : ELSUR searches Ibrboth sensitive and nonsensitive Title Ills, 
including applications not requiring the approval of tins Department of Justice (DOJ), Office 
of Enforcement operations (QEO). such sis for a digital display pager, must be conducted not 
more than 45 calendar days prior to the date the application and affidavit are filed with the 
court. 

B) (U) SPIN-OFFS : A "Spin-otT 1 is a new application lo begin surveillance at additional 
facilities arising from an existing investigation in which one or more Title Ills have already 
been, authorized. A spin off is considered to be an “original" request, even though some or all 
of the named persons are also named in ihe prior Title Ills. As with any new Title III, a search 
of the persons, facilities, and/or places specified in the "spin-ofT" application must be 
conducted not more (hart 45 calendar days prior to ihe date ihe application and affidavit me 
fited with the court. 

1 ) (U ) Any of the persons, facilities, and/or places named in die "spiii-offi" application and 
affidavit which have been Ihe subject of a previous search conducted not more than 45 
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calendar days prior to the dale the application and affidavit are filed with the court need not 
be searched again. However, a copy of the EC documenting the results of the previous 
search must be serialized in the investigative file to which the "spinoff" relates and in the 
corresponding ELSUR Administrative Subfile. 

C) (UJ EXTENSIONS : When an extension is sought, newly identified person*, facilities, and/or 
places must be searched not more than 45 calendar days prior to the date the application and 
affidavit are filed with the court, 

1 ) fU) if an individual named by a partial name, nickname, street name, and/or code name is 
subsequently identified by at least a first initial and a last name, a search must be 
conducted for (he now-identified individual prior !0 seeking art extension (taming that 
person, 

2) (U) The same persons, facilities, and/or plates previously searched that are named in an 
extension application and affidavit need not he searched again unless the original intercept 
has continued beyond 120 calendar days. When a Title EE I intercept extends beyond 120 
calendar days from the dale of the original order, an additional search of the persons, 
facilities, and/or places named in the request For extension must be conducted. 

H Z. 1.2 (U) How To Search 

(Lf) The ERS must be searched for previously submitted Title III applications to intercept 
communications involving any of the persons, facilities, and/or places specified in the current 
Title 111 application. 

A) (U) PRIOR APPLICATIONS : Searches arc required only For previously Submitted 
applications. There is no obligation to search for prior interceptions. The ELSUR search will 
provide records of the persons, facilities, and'or places named in prior applications filed by the 
FBI and other federal law enforcement agencies named in the request. Any prior applications 
identified must be set forth in the affidavit in support of the new application. 

B) (13) PRI OR INTERCEPTI ONS : If information regarding earlier interceptions is desired, an 
Agent may request a search of “all records" for any or at! of the persons, facilities, and/or 
places named in the search request, A search for “all records" will include poor FBI intercepts 
occurring over Title III and consensual monitoring in criminal mailers. This information may 
be relevant to the "necessity” portion of Che affidavit, if on agent has reason to believe there 
were numerous previous interceptions. 

H.2, 1.2,1 (U) Persons 

(U) List the true names or best known names of individuals for whom there is probable cause 
to believe that: (1 ) they are involved in the specified criminal activity, or (2) their criminal 
communications arc expected to be intercepted over the target facility or within the target 
premises/ When the involvement of a particular individual in the olTcnse is not clear. Agents 
should err on the side of caution and name that individual in the affidavit. 


1 f U) Ai] individuate listed in the application and affidavit as be! ng Involved in the specified criminal activity 
should be searched la EPS, not just those individuals who are expected to be intercepted- Further, the £L5UR 
Opera Linns Technician Is required. In index Into ERS all natnt-s listed to the application, which would include 
individuals who are involved in the specified criminal activity, regardless of whether they are expected to be 
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A) (U) A minimum of a first initial and East name is required (dr an KRS search. Biographical 
data such as date of birth, FBI Number, and/or Social Security Account Number if known, 
must be included. Do not include partial names, nicknames, street names, and/or code names. 
Include aliases only if the true name is unknown or if the alias meets ELSUR search 
requirements. Fur example, if the alias is a full name alias, it should be included (he,, John 
Smith a/k/a “William Johnson** or William Smith a/k/a "Liam Smith” ). 

3) (LI) Persons not luliy identified by a first initial ami a Iasi name who are specific targets of the 
interception should be named “John Doe,” “Jane Doe,” or “FNU LNU" and so listed as a 
"Person” whose communications are expected to be intercepted over the target facility, Such 
names (John Doe, Jane Doe, FNU LNU) need not be the subject of an IZLSUR search. If such 
an individual is later identified, file Agent must so advise the ELSUR (Jpemioiu Technician 
(EOT) to allow-' the ’’John Doc,” "Jane Due/' or ”FNU LNU" ELSUR record to be 
appropriately modified for retrieval in subsequent ELSUR searches. 

C) (U) A search of the LRS must be conducted for the subscriber or service provider of the target 
facility only if the subscriber or service provider is believed to be involved in the specified 
criminal offensefs}, 

DHU) Any additional persons, faei tides, and/or persons mentioned in the affidavit, but not also 
specified in the application as a person, facility, and/or place for which authorization to 
intercept is being sought, need not he searched or listed in die FD- L J4f> (Pre-Title III ELSUR 
Search Request). 

H.2J.2.2 { U) Facility 

(U> List available numeric and/or alphanumeric values directly associated with the device, 
equipment, or instrument over or from which the subjects are communicating (e.g., a 
telephone, pager, computer, etc.), Such values may include, but are not limited to, the 
telephone number of a land line phone, cell phone, or pager. Personal Identification Number. 
Cap Code, Electronic Serial Number (ESN), International Mobile Subscriber Identity (IMS!) 
Number. International Mobile Equipment Identifier (IMF!) Number, and/or Internet account 
information (including but not limited to screen name, online identity. ICQ number, and/or IP 
address). 

A) ( U ) Names of businesses, organizations, or agencies must be searched only if there is probable 
cause to believe the business, organization, or agency is culpable in the specified criminal 
offenses), 

B) (U) Searches need nol be conducted for telephone numbers or other facilities subscribed to, 
leased, or owned by the HHE lor use in the investigation for which die ELSUR is being sought. 

H.2.1.2.3 (V) Puces 

(U) List’ ( 1 ) each address of a targeted landline phone or computer terminal which will be 
subject to the Title HI order, and/or (2) sufficient information to describe or identify each 
P h ysicul location where a microphone surveillance (MISUR) installation will be located (e.g., 
vehicle identification number, license number, serial number of a boat or plane, and/or the 


intercepted over the target Facility or within the target premises, These names are to be indexed as Principal 
records. 
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address of a residence or a business for a fisedi ELSUR installation). Do nol include addresses 
of subscribers or proprietors of mobile installations such as cell phones, papers, vehicles, 
boats or planes, etc. 

|U) Persons, facilities, and/or places added to the affidavit subsequent k> the Chief Division 
Counsel's (CDC) review, or the review of any other reviewing or approving official must be 
searched prior to submitting the affidavit to the court. The responsible AUSA should be asked 
whether additions have been made to the affidavit without the FBI's knowledge. 

H , 2 .1,3 [U] Where To Search 

(U) A search of the FBI's ERS must be conducted for each item named in the search request, 
A search of the Drug Fnfoncqmcni Administration (DBA) and Immigration and Customs 
Enforcement (ICF't FRS is required for all Title 21 predicate offenses. As a matter of policy, a 
DEA and ICE ELSUR search is automatically conducted by FBIHQ for all 245 and 281 
investigative classifications, and any other application involving a Title 21 offense. 

A HU) The FRS of any other federal, state, or Local law enforcement agency that is actively 
participating in a joint investigation {as opposed to mere task force participation) or as to 
which Lhere is reason to believe may have previously sought Co intercept wire, Oral, or 
electronic communications involving any of the persons, facilities, and/ nr places specified in 
Che inslant application, should be searched. Where a search of state and/or local law 
enforcement HI.SL : R records is requested, the request should include a point of contact From 
the outside agency, if known. 

B) {U) If there is reason u> believe that any of the persons, facilities. and ; nr places specified m the 
current application have been the target of Title 111 electronic surveillance by another federal 
agency, that agency must be requested to conduct an ELSUR search of its records, 

H.2.1.4 (UJ HowTo Initiate A Search Request 

(U) Form FD-940 (Pre-Title III ELSUR Search Request! is used for requesting pre-Title III 
ELSUR searches of the F.RS of the FBI and any other federal, state, or local law enforcement 
agency. Each search request should state whether it is for: 

AHU) An initial search, first filing: 

B) (U) Ait initial search of newly named persons, facilities, and/or places for an extension: 

C) (U) An initial search of newly named persons, facilities, and/or places fora lL spm-off’ wiretap; 

or 

n» (U) A l so-calcndar day search (techeck) for $ continuing wiretap. 

(U) The form is designed to assist personnel requesting a search by guiding them through the 
process. Use of the form will ensure search requirements are met. 

(U) If an emergency situation exists, as defined by 18 U.S.C. § 25 18(7), an ELSUR search 
may be requested telephonically to the field office EOT. 
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H.2. 1 .4. 1 (U) Sea rch Procedur E 

(L) The EOT will conduct a search of the FRS for records of “previous applications only" or 
“all records 1 ' 1 as specified in the ED-940. Records retrieved as a result of the search will be 
furnished to the requesting Agent. I f intercept records arc requested for any or all of the 
persons, facilities, and/or places named in the ED-S)4tl intercept records which relate to 
unclassified criminal matters will be printed in their entirety and furnished to the requesting 
Agent as an enclosure to an EG documenting the search. 

(U) ll is the rcSpOrtsabitily of the requesting Agent to use reasonable efforts to determine 
whether the persons, facilities, and/or places identified in the search are the same persons, 
facilities, and/or places specified in the current application. IFthere is reason to believe they 
arc, offices identified as having tiled previous applications must he contacted and the EOT in 
that office must be asked to review the pertinent ELSUR file to determine whether the 
persons, facilities, and/or places iden tilled in the search are, in fact, the same as those 
specified in the current application. 

(.LT > It is not necessary to contact other offices regarding common names for which no special 
identifying data is available unless there is reason to believe there is a nexus between the 
current investigation and the investigation conducted by the other field offices. 

(U) Documentation confirming the conduct of all prc-Title 111 ELSUR searches must be 
uploaded and filed in the investigative file or the corresponding, ELSUR Administrative 
(EL A) Subfile. 

H.Z.1.5 (U) WhatToSav 

A) (U> NO PREVIOUS APPLICATIONS : Sample proposed affidavit language when no previous 

applications have been filed: 

1) (U) “Based upon a search of die records of the Federal bureau of investigation (and any 
other agency requested!, no previous applications have been filed for an order authorizing 
the interception of wire, oral, or electronic communications involving any of the person, 
facilities, and/or places specified herein for which authorization to intercept is being 
sought," 

R) ITJ> PREVIOUS APPLICATIONS : 

t) (U) if there was a previous application, include all relevant information concerning such 
application in the affidavil in support of the current application, identify the persons, 
facilities, and/or places named, the methodfs) of interception sought, the date the order was 
granted or denied, the court that issued or denied the order, the name of the authorizing or 
denying judge, the judicial district in which the application was tiled, and the relevance, if 
any. of the previous application to the eurrenl investigation. 

2) ffi! ) Sample proposed affidavit language when previous applications have been filed: 

"John Doe Was named in a previous application for an order authorizing the interception of 
wire and electronic communications. The order wsis signed on (date!, by U.5, District 
Judge (name). Of the District of (State), authorizing the interceptions fora period of thirty 

1 20) day*. An extension of the order was signed by Judge (name) on (date), authorizing the 
continued interception for an additional 20-day period." (Include relevance, if any. of the 
previous applications to ihe current investigation). 
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H.2.1.6 (U) Documentation 

A) (U) Agents must provide s copy of the following to die liddofficess ELS UR Operations 
Technician (EOT}; 

ll (U) signed application, enter and supporting affidavit; 

2 .1 (U) -completed CDC Checklist ( F D-926); 

3) (U> EC signed by the appropriate approving official i SAC or designee or appropriate I IQ 
official] documenting approval to seek court authorization for the Title III application; and 

4| (U} DQJ Memorandum directed to the AUSA entitled "Authorization tor Interception 
Order Application." 

B} (U | The EOT and the ELSUR supervisor are responsible for confirming that ELSUR searches 
■were properly conducted as set forth in the final applications submitted to the court.. Because 
this review is not conducted until after the application and order have been submitted to the 
court, the SA and 55A are responsible for verifying lhat all required ELSUR searches have 
been conducted prior to submission of the application and affidavit to the court The LOT is 
responsible for forwarding a copy of each final application, the SAC or HQ approving EC and 
the DOJ Memorandum via Title III Cover sheet to ihe Policy and Compliance Unit (PACT) 
of the Records Management Division (RMD) immediately upon the entry of Principal and 
Proprietary Interest Records into the EKN. 

C} (U) Macro EC Form FD-940 (Pro Title Ell ELSUR Search Request) must be used when 
requesting a search of any federal, state, or local law on foreemem agency's ELSUR Records 
System (ERSh including the FBTs. When an Agent requests a search of a state or local law 
enforcement agency’s records, the macro will produce an ’'auxiliary" letter simultaneously. 
The auxiliary letter will include only chut information necessary to conduct the local search 
and should be disseminated by the field office to the respective slate or local agency. 

D) (If) All requests for ELSUR searches must be uploaded and filed in the corresponding ELSUR 
Administrative (ELA) Subfile and submitted with adequaie time for the EOT to condtiel the 
search and document I he results, It is the responsibility of the affiant and the affiant's 
supervisor to ensure that all ELSUR checks have been properly completed prior to submission 
of the application and affidavit to the court. 


Verdun Daurd 
October 15,201 
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APPENDIX I: (U) ACCESSING STUDENT RECORDS MAINTAINED 
BY AN EDUCATIONAL INSTITUTION ("BUCKLEY AMENDMENT") 

1.1 (U) Summary 

(U) The Family Educational Rights and Privacy Act (FERPA) of 1974 (20 U.S.C. $ I232g, as 
amended by Public Law 107-56 (USA Patriot Act,)), commonly referred to as the '"Buckley 
Amendment/’ restricts the ability of educational agencies or institutions (collectively "schools”) 
to release educational records or personally identifiable information contained in such records 
without the consent of the student or the student’s parent. 

(U) FF.RPA defines "education records” as those records, files, documents and other materials 
which: 


A ) (U ) contain information directly related to a student: and 

B) (U) are maintained by an educational agency or institution or by □ person acting for such 
agency or institution. ( IQ U.S.C. § 1 232g(aM4kAki}X 

(LI //FOLIO) If operationally feasible. Hit employees should request the consent of the student or 
patent, as appropriate, in order to obtain covered records. During an Assessment, the FBI may 
ask school officials to provide certain information without the consent of the student or parent 
(see Section 18.5,6); during a Predicated Investigation, the FBI may compel production of 
education records, as set forth below, 

1,2 (LF//F0UG) Accessing Student Information or Records During an 
Assessment 

{U//FGUO) During an Assessment, FBI employees may seek voluntary disclosure of certain 
student records and information about students from schools without the consent of the student 
or parent, 

1.2.1 (V) Directory Informa tiqn 

(U//FOUG) "Directory information* 1 is information contained in an education record of a student 
"that would not generally be considered harmful or an invasion of privacy." (34 C,F R. $ 99,3) 
Specifically, "directory information” includes, but is not limited to; the student’s name, address, 
telephone listing, electronic mail address, photograph, date and place of birth, major field of 
study, dates of attendance, grade level, enrol Imenl status (e.g.. undergraduate or graduate, full- 
time or part-time), participation in officially recognized activities or sports, weight and height of 
members of athletic teams, degrees, honors and awards received, and the most recent educational 
agency or institution attended, A school may disclose "directory information” from its records 
without prior consent if: (I ) it has a directory information policy to disclose such information 
and (2) it has provided its students notice of the policy and the opportunity to opt out of having 
"directory information” disclosed, (See 34 CF.R, § 99,37) 
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(U//FOUO) The scope of information that can be released as directory information may be 
narrowed by the school For instance* if a college chooses not to categorize students' names and 
addresses as directory information* it must not voluntarily disclose such information to the FBI 
(Krauss i: Nassau Community College^ 469 N.Y.S, 2d 553 (N.Y. Sup. 1 9S3)>. Schools are also 
required to afford students (or parents, if the student is under IS) the opportunity to prohibit the 
release of directory information without their prior consent (ora court order). Nate ', the Buckley 
Amendment permits schools to release directory information ( absent an objection from the 
student); it does not require them to do so. Directory information may be sought orally or in 
writing. 

L2.2 (U) Observations 

(U//FOUO) KERF A governs the release of educational records. It does not govern the release of 
information gathered by a school official, based on his or her own observations. Accordingly, 
notwithstanding Buckley, a school official may disclose activity or behavior observed by the 
official 

123 (U) La w Enforcement Unit Records 

(U//FOUO) Under FERPA, schools may disclose information from “law enforcement unit 
records” without the consent of the parent or student, This exemption is limited to records that a 
law enforcement unit of a school creates and maintains For a taw enforcement purpose, “Law 
enforcement record" is narrowly defined as a record that is: (i) created by the taw enforcement 
unit: (ii) created for a law enforcement purpose; and (hi) maintained by the Jaw- enforcement 
unit. (34 C.F.R, $ 99.8(b)) If another component of the school discloses a student education 
record to the school's law enforcement unit, that record is not a ’law enforcement unit record” 
because it was not created by the law enforcement unit, Thus, a law? enforcement unit cannot 
disclose, without student consent, information obtained from education records created by other 
component of the school, even if the record has been shared with the law enforcement unit. 

L 2,4 (Uj Health or Safety Emergency 

( U//FOUG) FERPA does not restrict the disclosure of educational records in connection with r 
health or safely emergency, The regulations provide that schools may disclose information from 
an education record +l to appropriate parties in connection with an emergency if knowledge of the 
information is necessary to protect the health or safely of the student or other individuals" and 
that the exception is to be “strictly construed." As is the case with other emergency disclosure 
provisions (see 18 U.S.C. 2702), it is up to the school to determine in Lhe fust instance whether 
disclosure is necessary to protect the health or safety of the student or another individual, If it 
makes that determination, it is permitted to disclose educational records voluntarily and without 
the consent of the student or parent. 

LIS (U) Non-Students 

( Li.VFOUO) FERPA governs records of “students." A “student" is defined as a person on whom a 
school maintains educational records or personally identifiable information but does not include 
someone who has- not attended that school Fites retained or rejected applicants may be provided 
without prior permission or notification- (Tarka v. Franklin , 89 3 F.2d 102 (5 lh Cir. 1989)1 


□ember IS, 20 
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1.3 (U//FOUO) ACC ESSLNG STLfDE NT IN FO RM ATION OR RECORDS I N PRED ICATED 
Investigations 

(U//FQUQ) In addition to seeking voluntary production of records that can be voluntarily 
produced (sec 1.2 above), in a Predicated Investigation, FBI employees may compel production 
of education records without notice to the student or the student’s parents as follows: 

L3. 1 (U) Federa l Gra nd Jury Subpoena 

(U//FOUO) Schools shall disclose education records in response to a federal grand jury 
subpoena, tn addition, the court may order the institution not to disclose to anyone the existence 
or contents of the subpoena or the institution’s response. If the court so orders, then neither the 
prior notification requirements of34 C.F.R. $ 99.31(a)(9) nor the recordation requirements at 34 
C.F.R, ■§ 99.32 would apply (see DIOG Section 18.6.5). 

13.2 (V) A DM1N1STRA Ti VE SUBPOENAS 

(U//FOUO) Schools may disclose education records in response to an administrative subpoena. 
Administrative subpoenas may be issued in narcotics invest igal ions (see DIOG Section 
38.6,4.3.2, l ), sexual exploitation or abuse of children investigations (see DIOG Section 
3 8.6.4.3.2.2), and health care fraud investigations (sec DIOG Section IS. 6- A 3 2,3). As with 
federal grand jury subpoenas, the issuing agency may, for good cause shewn, direct the school 
not to disclose the existence or contents of the subpoena or the institution^ response. If the 
subpoena includes a nondisclosure directive, the school is permitted to request a copy of the 
good cause determination. 

133 (U) FISA Order for Business Records 

(U// FOLIO) See DIOG Section 18.6.7 

/. 3 A (U ) Ex Parte Order.? 

(U//FOUO) The USA Patriot Act amended FERPA to permit schools to disclose personally 
identifiable information from the student’s education records to the Attorney General or his 
designee without the consent or knowledge of the student or parent in response to an ex parte 
order issued in connection with a terrorism investigation. Such disclosures are also exempt from 
the Buckley Act requirements that disclosure of information from a student's records be 
documented in the srudenf s file. 
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APPENDIX J: (U) INVESTIGATIVE FILE MANAGEMENT AND 
INDEXING 

J.l (U) I N VESTlt! ATI VE FlLE MANAGEMENT 

f.l.l (U) Office of Origin (00 } 

(U//FOUO) Generally, the Office of Origin (QQ) is determined by: 

A) (LJ.'VFQUO ) The residence, location or destination of the subject of the investigation; 

B) ( LI//FQUQ) The office in which a complaint is first received; 

C) (U//FOUQ) The office designated by FEU HQ as OO in any investigation; 

D) (U/.'FOUO) The office in which the Foreign Police Cooperation investigation is opened ( 163 
classification); 

E) fU//FOU0) The office in which the Domestic Police Cooperation investigation is opened (343 
classification); 

F| (U/.'FOUO) The office m which the recovery of the vehicle occurred in an Interstate 
Transportation of Stolen Motor Vehicles (ITS MV) investigations: 

0) (U//FOUO) The office id which the contempt of court occurred; 

H) (U/.'FOUO) The office in which there is a violation of an order, judgment, or decree issued 
from arty judicial district in an FBI civil Racketeer Influenced and Corrupt Organizations 
(RICG) investigation; 

1) (U/7FQUO) The office in which the subject was convicted in investigations involving parole, 
probation, and mandatory release violators; 

J) (U/'FGUQ) The office in which the escape occurred, in Escaped Federal Prisoner and escaped 
deserter investigations: 

K) (LF'FGUO) Tile New York Field Offiee in courier investigations; 

L) (U/VFOU0) FBtHQ In all applicant. Background Investigation - Pardon Attorney's Office (73 
classi fiuHion ) investigations; 

M) fU/7FOUO) FB1HQ in QPM security referral (140A and 140C class iftcaiiom investigations; 

N) (U//FQUO) FBI HQ, Counterterrorism Division (CTD), Counlcrtcriorism Watch Unit in all 
Counterterrorism Major Cases (900 classification): 

O) (U/.'FOUO) FB1HQ, Critical Incident Response Group (C1RG( in all National Center for the 
Analysis of Violent Crime (NCAVO cases (252 A through 252E classifications); and 

F) (U/i'FOUO) FB1HQ, Office of Professional Responsibility (OPR) in OPR investigations (263 
classification). 

(U//FGUQ) When special circumstances exist, however, the origin may be assumed by the field 

office which has the most compelling interest. Uncertainties arid disagreements must be resolved 

by the appropriate FBI I IQ operational division. 
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/ 1.2 (U) Investigative Leads amd Lead Office { LO ) 

(U//FOUO) Leads arc sent by EC, or successor document (hereafter referred to as EC), to offices 
and assigned to indtvi dual s'organi nations in order to aid investigations. When the 00 sets a lead 
to another office, that office is considered a Lead Office (LO). 

(U//FQUQ) There are only two types of investigative leads: ‘"Action Required" and '‘Information 
Only" 


\ 4 , 2 . 1 [U] ACTION ttt-QI.Fl Mi-; |i lE A » 

(U//FOUO) An action required lead must be used if the sending office requires the receiving 
LO to take some type of investigative action. 

(U// FOLIO) An action required lead may only be set by EC’ out of an open investigative file, 
including an: 

A) (,U) Assessment ftle. including a zero sub-assessment file; 

B) (U) Predicated Investigation file; 

C) (U) pending inactive investigation tile; or 
DKU) unaddressed work tile. 

( IMFOUO I An action required lead cannot be set out of a dosed investigative file, a zero (0) 
or double zero (00) file. 

(U//FGUO) An action required lead must b e assigned, and it must he covered before the 
underlying investigation has boon eomplcted/elosed- 

l'i'2'2 [U] Information Only Lead 

(IMFOUO) An information only lead must be used when no specific action is required or 
necessary from the receiving LO, 

( LWFOUO) An information only lead may be set by EL’ out of an opened or closed 
investigative file, including a: 

A) fU)zero(O) file; 

B) (U) double zero file: 

C) (U) Assesameril file. including a zero sub-asscssmcnt file; 

D) (.U) Predicated Investigation file: 

E) (U) pending inactive investigation file; or 

F) (U) unaddressed work file. 

(U/fFOUO) An information only lead does not have to be assigned in order to be covered, and 
they car be covered while they are in the "Set" status. 


Venrfon Dated; 
Otrtefcer IS, 2011 
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JA3 (U) Office of Origin's Supervision of Cases 

(U//FQUG) The 00 is responsible For proper supervision of Assessments and investigations in 
its own territory and being conducted in a LO. The FBI employee, usually an FBI Special Agent, 
to whom an investigation is assigned, is often referred to as the “Case Agent" 1 An FBI employee 
is personally responsible for ensuring all logical investigation is initiated without undue delay, 
whether the employee is assigned in the OO or in an LO; this includes setting forth Action 
Required or Information Only leads as appropriate for other offices or other FBI employees in 
his/her own office. The OO Case Agent has overall responsibility for supervision of the 
investigation. When an LO has a delayed or delinquent investigation, it is the responsibility of 
the OO Case Agent to notify the LO (orally or in writing by email or EC, depending on the 
urgency of the situation) of its delinquency. 

/ 1 A (U) IN VESTIGA TtQN A ND OTHER FILES 

(UZ/FOUGi There are several types of nan-investigative files used in the FBI, including zero 
files, double zero files, administrative files, and control files. Additionally, there are several 
types of investigative files used in the FBI. including zero sub- assessment files. Preliminary 
Investigation files. Full Investigation files. Full Enterprise Investigation files, positive foreign 
intelligence Full Investigation files, and unaddressed work files. FBI files may be opened, 
closed, or placed in pending inactive status as specified below'. Note that in each of these files, all 
communications related to previous communication must note the existing communication’s 
ACS, or successor case management system, and Universal Index serial numbers in the reference 
fields. 

(U//FOU0) Certain records may be restricted based tin the classification of the records, e.g., on 
the sensitivity ofibe investigation. See the C nrporate Po l icy; Direcii ve 2 43 D , dated October 13, 
2009, 


( U//FOUO) The types of files are: 

j. 1.4.1 (U> Zero "O" Files 

(U//FOUO) Zero files may be opened in all file classifications. Zeno files may eon Lain leads, 
complaints not initiated as Assessments or Predicated Investigation, or other documents that 
do not require investigation. The documents contained within a zero file must be serialized. 
When additional communications referring to the same subject are received, they must be 
linked to the prior communication by placing the serial number of the prior communication in 
the reference field when the communication is uploaded and serialized in the Electronic Case 
File (ECF) Of ACS, or successor case management system. Because a zero file contains 
material which dues not require investigation. Action Required leads cannot be set out of zero 
files. Only Information Only leads can be set out of zero files. 

J. 1.4.2 (U) Double Zero dr QG" Files 

(U//FOUO) Double Zero files maybe opened in all file classifications Double Zero files may 
contain documentation, such as instructions, policy, statutes, and decisions applicable to the 
classification, that do not require investigation. The documents contained within a double zero 
file must be serialized. When additional communications referring to the same subject are 
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received, (hey must be linked to the prior communication by the reference field in the 
Electronic Case File, ACS, or successor ease management system. Because a Double Zero file 
contains material which does not require Investigation, Action Required leads cannot be set 
out of double zero files. Only Information Only leads can be set out of double zem files- 

J. 1,4.3 (U) Administrative "A* Files 

(U//FOUO) Administrative files may be used only for administrative purposes; they may not 
be used for investigative purposes. Administrative files may be used for documenting non- 
invcstigalivc matters, such as training matters (1 classification), administrative mailers (319 
classification!, personnel files (67 classification), etc. Note: Investigative activity may not 
be documented in an administrative (lie. Administrative files are designated with the letter 
"A M before the case number, e.g., 319X-HQ-A12345. 

(U//FGUO) Administrative (non-ir vesti gativej Leads may be assigned out of administrative 
files. When referring to the file number of an administrative file in communications, (be file 
number must include the letter "A n as part of file case number to indicate the file is an 
administrative file. 

J. 1.4.4 (U ) Control "C Fl l.ES 

(U//FOUQ) Control files are separate files established for the purpose of administering 
investigative programs. Control fifes are opened at the discretion of the individual responsible 
the investigative program. Control files may be opened in all class ificat ions. 

(U//FOUO) Like administrative files, control files may be used only for administrative 
purposes Control files may be used for documenting program management communications, 
policy pronouncements, technical or expert assistance to another law enforcement or 
intelligence agency, or other administrative/manage rial Functions. Admin isfrative/manageriat 
functions could include liaison contacts, training exercises, training received/provided, etc. 
Nute: Investigative activity may nut he documented in a cnntml file. Administrative (non- 
investigativc) leads can he assigned out of control files. 

(U//FOUQ) Control files are designated with the letter "C" before the ease number, e.g. t 29B- 
NF-C4456. When referring to the file number of a control file in communications, the file 
number must include the letter "C" as part of the case number to indicate the file is a control 
file. 

J, 1.4.5 [U) Investigative Files 

J. L 4 5 , l { u ') Assessment files 

J. 1.4.5. 1.1 (U) ZERO StJB-ASSFJjSMF.INT Fll.ES (FOR TV PI- 1 & 2 ASSESSMENTS) 

(U//FQUO) Zero sub-assessment files exist for all Investigative classifications and are 
used lo store all information acquired during these Assessments. Type 3 & 2 Assessments 
must be filed in an applicable zero sut^assessinent file (e.g., 9 1-0- ASSES S-D, 15-0- 
ASS ESS) when completed- When completing the FI>7I or Guardi an lead for an 
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Assessment invoking a sensitive investigative matter, the FBI employee must select the 
option "Sensitive Investigative Matter” 

(UVFOUOj Action leads can be set when using a zero sub-assessment file, 

(U/7FGUO! Guardian may be used only for documenting those Assessments described in 
DIOG Section 5. 6.3.1 regarding international terrorism, domestic terrorism, weapons of 
mass destruction terrorism, and cyber terrorism. The FD-71 or EC must be used to 
document all other Assessments, including criminal, counterintelligence, and non- 
terrorism WMD and Cyber. Both Guardian and the FD-71 provide the ability to set action 
leads. 

J. 1.4. 5.1.2 (U) Investigative Classification assessment Piles (eg ft type 3, 4 

and 6 Assessments) and Potential CHS Files (for type 5 

ASSESSMENTS) 

(U//FOUO) See DIOG Section 5 For the appropriate investigative file classification to be 
used when opening a Type 3, 4, 5, or 6 Assessment file, 

(U//F0UO) Because these Assessments require prior supervisory approval, the file must 
begin with an opening FX’ (DKXi Section 5A3.2 through 5.6.3. 5 type Assessments as 
discussed above). The tiUe/eaplion of the opening EC must contain the word 
"Assessment/' and the synopsis must identi fy the purpose and the objective of the 
Assessment. If at the time of the opening, or at anytime thereafter, the Assessment 
involves a sensitive investigative matter, the lille/eaption must contain the words 
"Assessment’* and "Sensitive Investigative Matter." When the objective has been met, a 
dosing EC must be approved by the SSA or SlA and uploaded to the file. If additional 
objectives arise during the Assessment, they must be documented in an EC, approved by 
the SSA or SlA, and uploaded to the file. 

/, i ASJ (U) Preumina ry and Full Snyestiga raw (Predica ted } Files 

(U. ,,, 'F0L’0) A Preliminary- Investigation, Full Investigation, Full Enterprise investigation, and 
Full Positive Foreign Intelligence Investigation must be initiated as discussed in DIOG 
Sections ft, 7. 8, and 9, respectively. Investigative information related to tliese investigations 
must be placed in the investigative tile, spun-off, or referred to another agency as authorized, 

y. 1.45.3 (V) PEfimm/lmcjiYE Full Investiga tion Files 

{U//FGUO) A Full Investigation may be placed in a pending- inactive status when all 
investigation has been completed and only prosecutive action or other disposition remains to 
be determined and reported, c.g.. locating a fugitive outside the United States. The DIOG does 
not authorize placing a Preliminary Investigation in pending inactive status. A pending- 
inactive Full Investigation may be assigned to investigative personnel or a squad/unit. 
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/. 1 . 4 . 5.4 (U) Una o dress t a Work Files 

(U//FGUO) An Assessment or Full Investigation that cannot be adequately addressed by 
available human resources due to its relative lower priority can lie placed in “Un addressed 
Work 1 " status, which is an "opened’' 1 file. The SSA must ensure that all reasonable 
investigative resources are being utilized on other investigative matters prior to designating an 
Assessment or Full Investigation as Unaddressed Work. Prior tu plaeing a matter into 
Unaddressed Work status, personnel should review the appropriate FB1HQ division's PG to 
ensure program procedures do not prohibit utilizing Unaddressed Work for a particular 
investigative classification. SSA/SIA review of Assessments or Full Investigations that are in 
Unaddressed Work status must adhere to DIOG Section 3,4.4 above, to determine whether the 
matter should remain in an Unaddressed Work status, or be closed, and whether there is any 
concurrent investigative jurisdiction. If concurrent jurisdiction exists, the matter must be 
referred in writing to the appropriate Jaw enforcement agency within 180 days of making the 
determination that concurrent jurisdiction exists, unless such a referral would: (i) jeopardize 
an ongoing investigation; (ill endanger the safety of an individual; (in) identify a confidential 
human source (CHS); (iv) interfere with a CHS T s cooperation; or (v) reveal legally privileged 
information. If a referral is not made, the SSA must document the reason by EC in the 
appropriate rile with a copy furnished to the appropriate operational unit, 

(LV/FOUO) Information or allegations regarding criminal activity which* if proven, would fall 
below the established prosecution guidelines of the relevant United Slates Attorney’s office 
and, as a result, are subject to blanket declinations should not be placed in Unaddressed Work 
status. These matters must either be opened in their respective substantive classification and 
then dosed using “status" (C5) - USA Declination pursuant to a blanket declination letter or 
placed in the appropriate zero file. These matters may not be placed into an administrative 
“A” file or control “C" flic. 


(U//FOUO) Unaddressed Work “Control* 1 files are not permitted. New Unaddressed Work 
must be opened and assigned a Universal Case File Number fUCFN). Unaddressed Work 
investigalitsns must be opened with a investigation type of '’U ,r (for unaddressed), assigned to 
the appropriate squad, and assigned a UCFN, 

(U//F0UQ) The FD-71 provides a mechanism to assign an Assessment to an Unaddressed 
Work file. In the FD-71. the Supervisor must select a reason for assigning the matter to the 
Unaddressed Work file and choose the appropriate classification. Upon uploading the FD-71, 
a new Unaddressed Work file w 01 be opened. Guardian (FD-71 a) does not have an 
"'Unaddressed Work” option because Guardian leads cannot be placed in an Unaddressed 
Work status. 

Jt .1.4.S.5 (U) Spin Off Investigation Files 

(U//FDUO) A spin-off investigation originates from an existing investigation. The spin-off 
investigation must have all the dements required to establish it as a separate invest [gallon 
within the appropriate investigative classification. 
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|*2 (O) Indexing - The Role of Indexing in the Management of FBI 

Information 

(U//FOUO) The test of FBI-generated documents must be uploaded into the Electronic Case File 
(ECF) component of the ACS system to be searchable, retrievable, and shamble through 
automated means, A full text search of the ACS system's ECF identifies only information that is 
available electronically and does not search fbr information that may be contained in the FBI's 
paper records. Because some records are not uploaded into ACS, all records must also be 
indexed. Even if a document is uploaded into ACS it must be indexed. While the full text of 
uploaded documents can be electronically searched, many records checks are performed using 
the Universal Index (UNI), a sub-component of ACS, rather than a text search of ECF. 

(U//FOUQ) The purpose of indexing is to record individual's names’ non-individual's names, 
such as corporations; and property which are relevant to FBI investigations so that this 
information can be retrieved, if necessary. The most common use of UNI is to respond to 
executive branch agencies' request name searches as part of their investigations to determine 
suitability for employment, trustworthiness for access to classified information and eligibility for 
certain government benefits. If employees do not properly index names and places that arise in 
FBI investigations, the FBI could provide erroneous in formation to other federal agencies. 
Further advice about how to index and what should be indexed can be found on the RMD 
w ebpag e. 
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APPENDIX K: (U) MAJOR CASES 


(U) (Note: The pulley for Major Cases was not completed by the time of the DIOG publication. 
It will be linked in the DIOG once approved,) 
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APPENDIX L: (U) ON-LINE INVESTIGATIONS 


(US (Note: The policy for On-Line Investigations was not completed by the time of the DIOG 
publication. It will be linked in the DIOG once approved.) 
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APPENDIX M: fU) THE FAIR CREDIT REPORTING ACT (FCRA) 

{ U) (Note: The policy for The Fair Credit Reporting Act was not completed by the- time of the 
DIOG publication. It will be linked in the DIOG once approved.) 
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APPENDIX N: (U) TAX RETURN INFORMATION 


(U) (Note: The policy for Tax Return in .formation was not completed by the time of the DIOG 
publication. It will be linked in the DIOG once approved.) 
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APPENDIX 0; (U) RIGHT TO FINANCIAL PRIVACY ACT (RFPA) 

(U) (Note: The policy for the Right to Financial Privacy Act was not completed by the time of 
the D1QG publication, It will be linked in the DIOG once approved ) 
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APPENDIX P: (U) ACRONYMS 


A/EAD 

Associate Executive Assistant Director 

ACS 

Automated Case Support 

AD 

Assistant Director 

ADD 

Associate Deputy Director 

ADIC 

Assistant Director-in-Charge 

AFIP 

Alias False 1 den till cation 

AG 

Attorney General 

AGG 

Attorney General Guidelines 

AGG-CHS 

Attorney General Guidelines Regarding, the Use of FBI Confidential Human 
Sources 

AGG-Dom 

Attorney General's Guidelines for Domestic FBI Operations 

AGG-UCO 

The Attorney General's Guidelines on FBI Undercover Operations 

AOR 

Area of Responsibility 

ARS 

Assessment Review Standards 

A SAC 

Assistant Special Agent in Charge 

ASC 

Assistant Section Chief 

ATF 

Bureau of Alcohol, Tobacco. Firearms and Explosives 

ALISA 

Assistant United States Attorney 

CALEA 

Communications Assistance for Law Enforcement Act 

CCRSB 

Criminal Cyber Response and Services Brandi 
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CD 

Counter! n tel t igence Division 

CDC 

C h ief D tvi s ion Counsel 

C.F.FL 

Code of Federal Regulations 

CHS 

Confidential Human Source 

CHSPG 

Confidential Human Source Policy implementation Guide 

CIA 

Central Intelligence Agency 

CJD 

Criminal In vest! gat ive Division 

CMS 

Collection Management Section 

CPO 

Corporate Policy Office 

CUORC 

Criminal Undercover Operations Review Committee 

CyD 

Cyber Division 

DAD 

Deputy Assistant Director 

DD 

Deputy Director 

DEA 

Drug Enforcement Administration 

DGC 

Deputy General Counsel 

Dl 

Directorate of Intelligence 

DLAT 

Deputy Legal Attache 

DNI 

Director of National Intelligence 

DOD 

Department of Defense 

DOi 

Department of Justice 

DOJ OEO 

Office of Enforcement Operations, DOJ 
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DOS 

Department of State 

DPO 

Division, Policy Officer 

DWS-EDMS 

Data Warehouse System- ELS UR Data Management System 

EAD 

Executive Assistant Director 

EC 

Electronic Communication 

ECF 

Electronic Case File 

ECPA 

Electronic Communication Privacy Act 

ECS 

Electronic Communication Service 

El 

Enterprise Investigation 

EL5UR 

Electronic Surveillance 

EO 

Executive Order 

EOT 

ELSUR Operations Technician 

ERS 

ELSUR Records System 

ESN 

1 

Electronic Serial Number 

ESU 

DOJ GEO. Electronic Surveillance Unit 

ETR 

Electronic Technical Request 

FBIHQ 

FBI Headquarters 

FGJ 

Federal Grand Jury 

FGUSO 

Field Guide for Undercover and Sensitive Operations 

FICP 

j 

Foreign Intelligence Collection Program 

FIG 

Field Intelligence Group 


P-3 

UNCLASSIFIED FOR OFFICIAL USF- ONLY 


Vernon D.ktird 
October 15. Zfl l 1 



UNCLASSIFIED FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 


FISA 

Foreign Intelligence Surveillance Act 

FISC 

Foreign Intelligence Surveillance Court 

FLIR 

Forward-looking Infrared 

FRCP 

Federal Rules of Criminal Procedure 

GC 

General Counsel 

GEOINT 

Geospatial Intelligence 

H1PAA 

Health Insurance Portability and Accountability Act 

HSC 

Homeland Security Council 

ICE 

Department of Homeland Security Immigration and Customs Enforcement 

1CM 

Investigative Case Management 

IfNI 

Innocent Images National Initiative 

ILB 

Investigative Law Branch 

ILU 

Investigative Law Unit 

LOB 

Intelligence Oversight Board 

IOD 

International Operations Division 

IP Address 

Internet Protocol Address 

IPG 

Intelligence Policy Implementation Guide 

ISP 

Internet Service Provider 

ITSMV 

Interstate Transportation of Stolen Motor Vehicles 

JDA 

Juvenile Delinquency Act 

JTTF 

Joint Terrorism Task Force 
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LEGAT 

Legal Attache 

LHM 

Letterhead Memorandum 

LO 

Lead Office 

MAR 

Monthly Administrative Report 

MLAT 

Mutual Legal Assistance Treaties 

MOU/MOA 

Memorandum of Understanding' Agreement 

M5IN 

Mobile Station Identification Number 

MST 

Mobile Surveillance Team 

MST-A 

Mobile Surveillance Team — Armed 

NARA 

National Archives and Records Administration 

NCMEC 

National Center for Missing and Exploited Children 

NISS 

National Information Sharing Strategy 

NSB 

National Security Branch 

NSC 

National Security Council 

NSD 

National Security Division, DCU 

NSL 

National Security Letter 

NSLB 

National Security Law Branch 

NSSE 

National Special Security Events 

NSUCOPG 

National Security Undercover Operations Policy Implementation Guide 

OCA 

Office of Congressional Affairs 

OCRS 

Organized Crime and Racketeering Section, DOJ 
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OGC 

Office of the General Counsel 

OIA 

Otherwise Illegal Activity 

QIC 

Office of Integrity and Compliance 

OIO 

Office of Operations, DOJ 

OLC 

Office of Legal Counsel, DOJ 

GO 

Office of Origin 

GPA 

Office of Public Affairs 

OTD 

Operational Technology Division 

PBDM 

Pattern Based Data Mining 

PCHS 

Potential CHS 

PCLU 

Privacy and Civil Liberties Unit 

PCTDD 

Post Cut-through Dialed Digits 

PFI 

Positive Foreign Intelligence 

PG 

Policy Implementation Guide 

PI 

Preliminary Investigation 

PIA 

Privacy Impact Assessment 

PIAB 

President's Intelligence Advisory Board 

PSA 

Performance Summary Assessments 

PTA 

Privacy Threshold Analysis 

HA 

Residen t Agency 

R.CS 

Remote Computing Serv ice 


Datwl: 

tkrobfiir IS. 301 1 


P-6 

UNCLASSIFIED FOR OFFICIAL USE ONLY 




UNCLASSIFIED - FOR OFFICIAL USE ONLY 
Domestic investigations and Operations Guide 


RF 

Radio Frequency 

RFPA 

Right to Financial Privacy Act 

RICO 

Racketeer Influenced and Corrupt Organizations 

RIG 

Regional Intelligence Group 

RMD 

Records Management Division 

SA 

Special Agent 

SAC 

Special Agent- in-Charge 

SC 

Section Chief 

S1A 

Supervisory Intelligence Analyst 

SIM 

Sensitive Investigative Matter 

SORC 

Sensitive Operations Review Committee 

SSA 

Supervisory Special Agent 

SSRA 

Supervisory Senior Resident Agent 

TFM 

Task Force Member 

TFO 

Task Force Officer 

TFP 

Task Force Panic! pant 

TMD 

Technical Management Database 

| TTA 

Technically Trained Agent 

UC 

Unit Chief 

UCE 

Undercover Employee 

LICFN 

Universal Case File Number 
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uco 

Undercover Operation 

UCRC 

Undercover Review Committee 

UDP 

Undisclosed Participation 

UNI 

Uni versa] Index 

USA 

United Stales Attorney 

USAO 

United Stales Attorney's Office 

US.C, 

United Slates Code 

USG 

United Slates Government 

USIC 

United States Intelligence Community 

US1C 

United States Intelligence Community 

USIC 

United Stales Intelligence Community 

USPER 

United States Person, United States Persons, US PLR, USPEKs, US Person, 

US Persons, LL$, Person, U,S. Persons 

USPS 

United States Postal Service 

USSS 

United States Secret Service 

vicap 

Violent Criminal Apprehension Program 

vs 

Victim Services 

wrrr 

Wireless Intercept Tracking Technology 

WMD 

Weapons of Maas Destruction 

WMDD 

Weapons? of Mass Destruction Directorate 
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APPENDIX Q: [U) DEFINITIONS 


(UV/FOUO) Academic Nexus SIM: As a matter of FBI policy, an investigative activity having 
an “academic nevus'' is considered a sensitive investigative matter (SIM) if (1) the investigative 
activity involves matters related to the responsibilities of an administrator or faculty member 
employed by any college or university that is located inside the United States, provided the 
matter under a predicated investigation is related to the individual’s position at the institution; or 
(ii) the matter involves any student association recognized and approved by the college or 
university at which the student association at issue is located, and the college or university is 
located inside the United States, See the classified Appendix G for additional information. 

(LI) Aggrieved Person: A person who is the target of an electronic surveillance or any other 
person whose communications or activities were subject to electronic surveillance, 

(E//FOUO) Assessments: The ACKi-Dom authorizes as an investigative activity called an 
“Assessment” which requires an authorized purpose and articulated object) ve[s). The DIOG 
defines five types of Assessments that may be carried out to delect, obtain information about, or 
prevent or protect against federal crimes or threats to the national security or to collect foreign 
intelligence. Although s ‘no particular factual predication" is required, the basis of an assessment 
cannot be arbitrary or groundless speculation, nor can an Assessment be based solely on the 
exercise of First Amendment protected activities or on the race, ethnicity, national origin or 
religion of the subject, or a combination of only those factors. 

(L;//FOUO) Closed Circuit Television (CCTV): a fixed-location video camera that is typically 
concealed from view or that is placed on or operated by a consenting party. 

(U) Consensual Monitoring: Monitoring of communications for which a court order or warrant 
is not legally required because of the consent of a party to the communication. 

(L : ) Elect runic Cum mu ideation Service: Any service that provides to users thereof the ability 
to send or receive wire or electronic communications. For example; telephone companies and 
electronic mail companies generally act as providers of electronic communication services. 

(L 1 ) Electronic Communications System: Any wire, radio, electromagnetic, photooptical or 
photoelectronic facilities for the transmission of wire or electronic communications, and any 
computer facilities or related electronic equipment for Lhc electron it storage of such 
communications, 

(Ll) Elect run it Storage: Any temporary, intermediate storage of a wire or electronic 
communication incidental to the electronic transmission thereof, or any storage of such 
communication by an electronic communication service for purposes of backup protection of 
such communication. In short, "electronic storage* refers only to temporary storage, made in the 
course of transmission, by a provider of an electronic communication service. 

(U//FOUO) Electronic I racking Device: Direction finder including electronic tracking devices, 
such as, radio frequency beacons and transmitters, vehicle locator units, and the various devices 
that use a Global Positioning System or other satellite system For monitoring non-communication 
activity. 
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(U//POUO) Employee: For purposes of the AGG-Dom and DIOG, an ‘FBI employee 11 includes, 
bur not limited to. an operational/administrativc professional support person, intelligence analyst, 
special agent,, task force officer (TFG). task force member (TFM), task force participant (TFP), 
detailee, and FBI contractor. An FBI employee is bound by the AGG-Dom and DJGG. The FBI 
employee definition excludes a confidential human source (CHS), 

(LV/FOLO) Enterprise: The term “enterprise” Includes any individual, partnership, corporation, 
association, or other legal entity, and any union or group of individuals associated in fact 
although not a legal entity. 

(U//FOUO) Enterprise Investigation: An Enterprise Investigation (EF) examines the structure, 
scope, and nature of the group or organisation including: its relationship, if any, to a foreign 
power; die identity and relationship of its members, employees, or other persons who may be 
acting in furtherance of its objectives; its finances and resources; its geographical dimensions: its 
past and future activities and goals; and its capacity for harm. (AGG-Dom, Part 1I.C.2) 

(U//FOUO) Enterprise Investigations are a type of Full Investigation and are subject to the same 
requirements that apply to full investigations described in Section 7. Enterprise Investigations 
focus on groups or organizations that may be involved in the most serious criminal or national 
security threats to the public, as described in Section 8. Enterprise Investigations cannot be 
conducted as preliminary investigations or assessments, nor may they be conducted for the sole 
purpose of collecting foreign intelligence. Nijtc: Enterprise Investigations were designed, among 
other things, to combine and replace the traditional “Racketeering EnteFpri.se Investigations" 
t R l£ I } (92 classification) and “Terrorism Enterprise Investigations" (TFI) 1 1 Of J classification). An 
El is only authorized to be opened on the most serious criminal or national security threats. Sec 
DIQG Sections 8.4 and 8.5. The term Enterprise Investigation (El) as used in the DIOG should 
not be confused with other usages of the word “enterprise,’ 1 such as criminal enterprise 
investigations (e.g„ 281 classification, 245 classification, etc.), which ate not HFs as defined in 
DIOG Section S. Although an Enterprise Investigation may not be conducted as a Preliminary 
Investigation, a Preliminary Investigation may be used to determine whether a group or 
organization is a criminal or terrorist enterprise if the FBI has “information or an al legal ion” that 
an activity constituting a federal crime or a threat to the national security has or may have 
occurred, is or may be occurring, or will or may occur, and the investigation may obtain 
information relating to the activity of the group or organization In such activity. An Assessment 
may also be initiated to determine whether a group or organization is a criminal or terrorist 
enterprise. 

(U//FOUO) Extraterritorial Guidelines: The guidelines for conducting investigative activities 
outside of the United States are currently contained in; (i) The Attorney Genera Is Guidelines for 
Extraterritorial FBI Operations and Criminal Investigations', (ii) The Attorney Genera/ V 
Guidelines for FBI National Security Investigations and Foreign intelligence Collect ion, and 
(iii) The Attorney General Guidelines on the Development and Operation of FBI Criminal 
Informants and Cooperative Witnesses in Extraterritorial Jurisdictions (collectively, the 
Extraterritorial Guidelines); (iv) The Attorney General Procedure for Reporting and Use of 
Information Concerning Violations of Law and A uthorization for Participation in Otherwise 
Illegal Activity in FBI Foreign Intelligence. Counterintelligence or International Terrorism 
Intelligence Investigations (August H, 1988); and (v) the Memorandum of Understanding 
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Concerning Overseas and Domestic Activities of the Central Intelligence Agency and the 
Federal Bureau of Investigation (2005). 

(U//FOU O) FISA: The Foreign Intelligence Surveillance Act of 1978. ns amended. The law 
establishes a process for obtaining judicial approval of electronic surveillance, physical searches* 
pen register and trap and trace devices, and access to certain business records Tor the purpose of 
collecting foreign intelligence. 

(If) Fur or On Behalf of n Foreign Power: The determination that activities are for or on behalf 
of a foreign power shall he based on consideration of the extent to which the foreign power is 
involved in control or policy direction; financial or material support; or leadership, assignments* 
or discipline. 

IU) Foreign Computer Intrusion; The use or attempted use of any cyber-activity or other 
means, by. for. or on behalf of a foreign power to scan, probe, or gain unauthorised access into 
one or more United States-based computers. 

(U) Foreign Intelligence: Information relating to the capabilities, intentions, or activities of 
foreign governments or elements thereof, foreign organizations or foreign persons, or 
international terrorists. 

(If) Foreign Intelligence Requirements; 

A) (U'/FGUD) National intelligence requirements issued pursuant to authorization by the 

Director of National Intelligence, including the National Intelligence Priorities Framework and 
the National HUMINT Collection Directives, or any successor directives thereto; 

Bi (U^/FOUO) Requests to collect foreign intelligence by the President or hy Intelligence 
Community o facials designated by the President; and 

C) (U//FOUO) Directions to collect foreign intelligence by the Attorney General, the Deputy 
Attorney General, or an official designated by the Attorney General. 

(U) Foreign Power; A foreign government or any component thereof, whether or not recognized 
by the United States; a faction of a foreign nation or nations, not substantially composed of 
United States persons (USPERs): an entity that is openly acknowledged by a foreign government 
or governments to be directed and controlled by such foreign government or governments; a 
group engaged in international terrorism or activities in preparation therefore; a foreign-based 
political organization, not substantially composed of USPERs; or an entity that is directed or 
controlled by a foreign government or governments. 

(U) Full Invest Ration: A Full Investigation may be opened if there is an 'articulable factual 
basis” for tbc investigation that reasonably indicates one of the following circumstances exists: 

(U) An activity constituting a federal crime or a threat to the national security has or may have occurred, 
is or may be occurring, or will or may occur and die investigation may obtain information relating to the 
activity or the involvement or role of an individual, group, or organization in such activity: 

A) (U) An individual, group, organization, entity, information, property, or activity is or may he a 
Larget of attack, victimization, acquisition, infiltration, or recruitment in connection with 
criminal activity in violation of federal law ora threat to the national security and the 
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investigation may obtain information that would help to protect against such activity or threat; 
or 

B) (Ut The investigation may obtain foreign intelligence that is responsive to a PFI requirement, 
as defined in DIOG Section 7,4.3, 

(U) All lawful investigative methods, may be used in a Full Investigation. 

(U) A Full Investigation of a group or organization may be opened as an Enterprise Investigation 
if there is an articulable factual basis for the investigation that reasonably indicates the group or 
organization may have engaged, or may be engaged in* or may have or may be engaged in 
planning or preparation or provision of support for 

AH LI) Radkeleering Activity; 

I ) (U) A pattern of racketeering activity as defined in l ft U.S-C. § 3 961(5}; 

B) (U) International Terrorism; 

1 ) (U) international terrorism, as defined in the AGCJ-Dom. Part VI1J, or other threat to the 
national security; 

C) (If) Domestic Terrorism; 

1 } (U) Domestic terrorism as defined in 1 8 U.S.C. £ 133 1(5) involving a violation of federal 
Criminal law; 

2) (U) Furthering political or social goals wholly or in part through activities that involve 
force or violence and a violation of federal criminal law; or 

3) (U) An offense described in 18 U.S.C. § 2332b(g)(fiXB) or 1 8 U.S.C. $ 43. 

(LI) Human Source: A Confidential Human Source as defined in the Attorney General's 
Guidelines Regarding Lhc Use of FBI Confidential Human Sources. 

(II) Intelligence Activities: Any activity conducted for intelligence purposes or to affect 
political ot governmental processes by. for. or on behalf of a foreign power. 

(U) International Terrorism: Activities that involve violent acts or acts dangerous to human 
life that violate federal, state, local, or tribal criminal law or would violate such law if committed 
within the United States or a state, local, or tribal jurisdiction; appear to be intended to intimidate 
or coerce a civilian populat ion; to influence the policy of a government by intimidation or 
coercion; or to affect the conduct of a government by assassination or kidnapping: and occur 
totally outside the United States, or transcend national boundaries in terms of die means by 
which they are accomplished, the persons they appear fo be intended to coerce or intimidate, or 
the locale in which their perpetrators operate or seek asylum. 

(L7/FOLO) Notional Security Letters; an administrative demand for documents or records that 
can be made by the FBI during a predicated investigation relevant to a threat to national security. 
The standard for issuing an NSL, except under IS U.S.C. § 1681 v n is relevance to an authorized 
investigation to protect against international terrorism or clandestine intelligence activities, 
provided that such an investigation of a United Slates person (USPER) is not predicated solely 
on activities protected by the First Amendment of the Constitution of the United States. 
Information is relevant if it tends to make a fact more or less probable. There must be a 
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reasonable belief that the information sought through the NSL either supports or weakens facts 
being investigated in a case. 

(U//FOUO) Operational Division Or Operational Unit: “QjwrationaF division Or operational 
unit as used in the DIOG means the l-BI HQ division or unit responsible for management and 
program oversight of the File classification for the substantive investigative matter (Le., 
Assessment or predicated investigation}. Previously referred to as the FBIHQ ■‘substantive’* 
division or substantive unit. 

(IL/FOUO) Pen Register Device: Records or decodes dialing, routing addressing or signaling 
information transmitted by an instrument or facility from which a wire or electronic 
communication is transmitted, provided that such information must not include the contents of 
any communication. 

{U7/FOUQ) Physical Surveillance (Nirt Requiring a. Court Order): The deliberate observation 
by an FBI employee of persons, places, prevents, on either a limited or continuous basis, in 
areas where there is no reasonable expectation of privacy. Note: DIOG Section IS. 5.8 makes a 
distinction between '"‘casual observation" and physical surveillance, and Specifies factors to be 
considered when determining whether a particular plan of action constitutes casual observation 
or physical surveillance. (See DIOG Section 18.5,8) 

(IT) Preliminary Investigation: A Preliminary Investigation is a type of predicated investigation 
authorised under the AGG-Dom that may be opened (predicated) on the basis of any ‘'allegation 
or information” indicative of possible criminal activity or threats to the national security. 
Preliminary Investigations may be opened to delect, obtain information about, or prevent or 
protect against federal crimes or threats to the national sceurily. However, a Preliminary 
Investigation cannot be opened or used solely for the purpose of collecting against Positive 
Foreign Intelligence (FPL) requirements or for conducting Enterprise Investigations. 

(IT) Proprietary; A sole proprietorship, partnership, corporation, or other business entity 
operated on a commercial basis, which is owned, controlled, or operated wholly or in part on 
behalf of the FBI, and whose relationship with the FBI is concealed from third parties, 

(L r ) Provider of Fleet route Communication Services: Any service that provides the user 
thereof the ability to send or receive wire or electronic communications. 

(L ) Publicly Available: Information that has been published or broadcast Ibr public 
consumption, is available on request to the public, is accessible on-line or otherwise to the 
public, is available to the public by subscription or purchase, couid be seen or heard by any 
casual observer, is made available at a meeting open to the public, or is obtained by visiting any 
place or attending any event tba! is open to the public. 

(U) Records; Any records, databases, files, indices, information systems, or other retained 
information. 

II') Relevance: Information is relevant if it tends to make a fact of consequence more or less 
probable. 
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(UZ/FCUO) Remote Crimp tiling Services: The provision to the public of computer storage or 
processing services by means of an electronic communication system. In essence, a remote 
computing service is an off-si le computer that stores or processes data for a customer. 

(U/AFGUO) Sensitive Investigative Matter; An investigative matter involving a domestic 
public official, domestic political candidate, religious or domestic political organization or 
individual prominent in such an organization, or news media, or an investigative matter having 
academic nexus, or any other matter which, in the judgment of the official authorizing an 
investigation, should be brought to the attention of FBI HQ and other DOJ officials, 

(1!) Sensitive Man it a ring t ire u instance; Investigation of a member of Congress, a federal 
judge, a member of the Executive Branch at Executive Level IV or above, ora person who has 
served in such capacity within the previous two years: (Note: Executive Levels I through IV arc 
defined in 5 U.S.C §§ 5312-5315.) 

A) (U) Investigation of the Governor. Lieutenant Governor, or Attorney General of any slate or 
territory, or a judge or justice of the highest court of any stale or territory, concerning an 
offense involving bribery, conflict of interest, or extortion related to the performance of 
official duties; 

Bl I LI J A parly to the communication is in the custody of the Bureau of Prisons or the United 
States Marshals Service or is being or has been afforded proleelton in ihe Witness Security 
Program: or 

C) (LI) The Attorney General, the Deputy Attorney General, or an Assistant Attorney General has 
requested dial the FBI obtain prior approval for the use of consensual monitoring in a specific 
invesd gallon, 

(LJ) Special ,-\£enf in Charge; The Special Agent in Charge of an FBI field office (including an 
Acting Special Agent in Charge), except that the functions authorized for Special Agents in 
Charge by these Guidelines may also be exercised by the Assistant Director in Charge or by any 
Special Agent in Charge designated by the Assistant Director in Charge in an FBI field office 
headed by an Assistant Director, and by FBI Headquarters, officials designated by the Director of 
the FBI. 

(U| Special F vents Management; Planning and conduct of public events or activities whose 
character may make them attractive targets for terrorist attack, 

(LI) Stale, Local, or Tribal: Any stale or territory of the United Stales or political subdivision 
thereof, the District of Columbia, or Indian tribe. 

(1LVFOUO) Surveillance: 

A) (U//FOUO) Electronic surveillance (FXSUR) - under Title III and FISA is the non- 

consensual electronic collection of information (usually communications) under circumstances 
ill which the parties have a reasonable expectation of privacy and court orders or warrants art 
required. ELS1JR is only authorized as an investigative method in the conduct of full 
investigations. ELS UR requires (a) administrative or judicial authorization prior to its use: (bl 
contact with the field office ELSUR support employee to coordinate all necessary- 
recordkeeping; and (c) consultation with the Technical Advisor tTA) or a designated 
Technically Trained Agent (TTA) to determine Feasibility, applicability, and use of the 
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appropriate equipment. (See DIOG Appendix Q - Definitions and Section IB for FISA and 
Tide 111.) 

U) I LL'/FOLrO} C nmemiual monitoring of cnmnumkiiliuiih. including cunsinsii^l computer 
monitoring, or electronic surveillance (ELS UR) - where there is no reasonable expectation 
of privacy is permitted in Predicated Investigations, These methods usually do not require 
court orders or warrants unless they involve an intrusion into an area where there is a 
reasonable expectation of privacy or noo-eonsensua! monitoring of communications, but legal 
review is generally required to ensure compliance with legal requirements. Examples of this 
type of surveillance include, but are not limited to, CCTV. direction finders, tracking devices, 
etc. (See DIOG Appendix 0 - Definitions and Section IS for Consensual Monitoring, CCTV* 
Electronic Tracking Device* Pen Register Device, ami Trap and Trace Device.) 

(LV.'HHJO) Physical surveillance - is the deliberate observation by an FBI employee of 
persons, places, or events, on either a limited or continuous basis, in areas where there may or 
may not be a reasonable expectation of privacy, {See DIOG Section ISIS for physical 
surveillance in situations not requiring a court order and a discussion of the distinction 
between physical surveillance and casual observation), Factors to consider in determining 
whether observations are casual observation or physical surveillance include: (i) the duration 
and frequency of the observation of a particular person or location* (ill the location of the 
observation point,! ns) whether the observation is done from a stationary* position or a moving 
position, and (iv) whether the observation is being done with the unaided eye. The use of 
mechanical devices operated by the uscrfc.g,, binoculars; hand-held cameras; remotely 
operated and continually monitored cameras; radiation, chemical or biological detectors) is 
authorized provided that the device is not used to collect information in which a person has a 
reasonable expectation of privacy. (See also DIOG Section lA.fi-3.ft (CCTV/ 1 Video 
Surveillance Where There is a Reasonable Expectation of Privacy in the Area to be Viewed or 
for the Installation of the Equipment)), 

(U) Threat to the Nation a I Security: International terrorism; espionage and other intelligence 
activities, sabotage, and assassination, conducted by, for, or on behalf of foreign powers, 
organ Nations, or persons; foreign computer intrusion; and other matters determined by the 
Attorney General, consistent with Executive Order 12333 ora successor order. 

(U//FOI O) Trap and Trace Device: Captures the incoming electronic or other impulses that 
identify 1 the originating number or other dialing, routing, addressing or signaling information 
reasonably likely to identify the source of a wire or electronic communication,, provided that 
such information does not include the contents of any communication. 

(U//FOUG) Undercover Activity: An “undercover activity” is any investigative activity 
involving the use of an assumed Identity by an undercover employee For an official purpose, 
investigative activity, or function. 

(LI //FOUO) Undercover Employee: Art employee of the FBI, another federal, state, or local law 
enforcement agency, another entity of the United States Intelligence Community (U SIC), or 
another foreign intelligence agency working under the direction and control of tlie FBI whose 
relationship with (he FBI is concealed from third parties by the maintenance of a cover or alias 
identity for an official purpose, investigative activity* or function. 

(U//FOUO) Undercover Operation: An '‘undercover operation” is an operation that involves a 
series of related “undercover activities” over a period of time by an “undercover employee. 1 * A 
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series of related undercover activities consists of more than five separate substantive contacts by 
an undercover employee with the individuals under investigation. In investigations relating to 
activities in violation of federal criminal taw that do not concern threats to the national security 
or foreign intelligence, undercover activity involving sensitive circumstances, which are listed in 
the AGG-UCO and the FCjUSO. constitutes an undercover operation regardless of the number of 
contacts involved. A substantive contact is a communication, whether by oral, written, wire, or 
electronic means, that includes information of investigative interest. Mere incidental contact 
(e,g., a conversation that establishes an agreed time and location for another meeting) is not a 
substantive contact within the meaning of this policy, 

(II) United States: When used in a geographic sense, means all areas under the territorial 
sovereignty of the United Stales, 

(U| United Stales Pcrsim (US PER): Any of the following, but not including any association or 
corporation that is a foreign power, defined as an entity that is openly acknowledged by a foreign 
government or governments to be directed and controlled by such foreign government or 
governments: 

A) (U) An individual who is a United States citizen or an alien lawfully admitted for permanent 
residence: 

B) (U) An unincurporated association substantially composed of individuals who are United 
States persons (USPERs); or 

U) (U) A corporation incorporated in the United States, 

(U) If a group or organization in the United States that is affiliated with a foreign-based 
international organ ization operates directly under the control of the international organization 
and has no independent program or activities in the United States, the membership of the entire 
international organization shall be considered in determining whether it is substantially 
composed of USPERs. If, however, the United States-bascd group or organization has programs 
or activities separate from, or in addition so. those directed by the international organization, only 
Its membership in the United States shall be considered in determining whether it is substantially 
composed of USPERs, A classified directive provides further guidance concerning the 
determination of USPLR status. 

(U> Use: When used with respect to human sources, means obtaining information from, tasking, 
or otherwise operaiing such sources. 
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APPENDIX R: JU) SUPERCEDED DOCUMENTS AND NFIPM, MIOG # 
AND MAOP SECTIONS 

( U//FGUO) This guide supersedes the following FBI policies and procedures: 


R-] 

UNCLASSIFIED - FOR OFFICIAL USE ONLY 


I.T.JLUJ, 


UNCLASSIREtMTOUG 
DICK] Ertipcrsceskiris 


SH 

Preface 


OPOG 1 3ui»rie4ih&n 

DIOG 2 Suparuuion 

MIOG hl[ru 

Preface 

Preieca 

DWG Preamble 

D*OG Preamble 

MIOG mtra 

Seclien 1 

SeOton. SI InveslifplivE Aulbonly amt Responsibility ( 12) 

D*OG Preamble 

DWG Preamble 

MIOG hi Ira 

Sedion 1 

1-1 AUTHORITY OF A SPECIAL ftGENT 

DWG Preamble 

DWG Preamble 

MIOG Ultra 

Section 1 

1-2 INVESTIGATIVE RESPONSI0H.ITV 

0*0G Preamble 

DfOO Preamtne 



1-3 THE ATTORNEY GENERALS GUIDELINES ON 



MIOG Inlra 

Gcdrrn 1 

GENERAL CRIMES BACKfTF FRiNG E«TERPfi|SE W& 

DWG Preamble 

□IOG Preamtli; 



TERRORISM ENTERPRISE INVESTIGATIONS 



MIOG Ultra 

Sedllan 1 

1x3 INTRODUCTION 

D*QG Preamble 

OfOG Pr&gnTCJe 

MIOG bilra 

Secllqn 1 

1-31. GEMERAL PRINCIPLES 

□iOG Preamble 

DWG Preamble 

MIOG Mira 

Seaton 1 

1 -3 II GENERAL CRIMES INVESTIGATIONS 

DM Preamble 

□IOG Preambta 

MIOGsrtra 

Seaton i 

i-a m Criminal inttelugewce investigations 

□IOG Preamble 

DIOG Prnamhle 

MIOG knlro 

Seaton 1 

1*3 IV INVESTIGATIVE T£CHHIQuE9 

DM Preamble 

DIOG Preamble 

MIOG fcilra 

Sedton i 

1-3 V DISSEMINATION AND MAINTENANCE OF 
INFORMATION 

□IOG Preamble 

□IOG Preamirle 

.MIOG Snlrt 

Seabh 1 

1-2 VI COUNTERTERRORISM ACTIVITIES AND OTHER 
AUTHORIZATIONS 

DM Proairaiie 

DWG Preamble 

MMUtro 

Section 1 

1-m RESERVATION 

□IOG Preamble 

DIOG Pra«rrai*B 

MIOG hito 

Sacsion 1 

14 INVESTIGATIVE AUTHORITY AND THE FIRST 
AMENDMENT 

DIOG Preamble 

DWG Preafrble 

MIOG mire 

Beotian 2 

Serinn- S2 Management and All pea Item Program* 1 ST | 

DOG Praambla 

DIOG Preamble 

MIOG him 

Sfldton? 

2-1 NATIONAL PRIORITY PROGRAMS 

□IOG Preamble 

□IOG Preamble 

MIOG friirfS 

Sedan 2 

2-1 1 Fonygn Corai re rmteUgence iFCl) 

DM Preamble 

DIOG Preamble 

MM Ulra 

Seaton Z 

2x1 1,1 Deliwton 

□IOG Preamble 

DIOG Preamble 

MIOG nlro 


2-T.1.2 OlHeelive 

CHO0 Preamble 

DIOG Preamble 

MIOG mtro 

Section 2 

2-1 .2 Organized Cnmn 

DIOG Preamble 

DM Preamble 

MIDG nlra 

Section 2 

2- 1.2.1- Dennbon 

□IOG Preambla 

□IOG Preamble 

MIOG Inlro 

Seaton 2 

2-1-2 2 OtHedrve 

DIM Preamble 

DIOG Preamble 

MlCK? inira 

Section 2 

2-1.2.3 Raniwigof Otgenited CAmiul Aziiviliei 

DIOG Preamble 

DIOG Preentiia 

MIOG Inlra 

Sectnn 2 

2-1.3 Drug 

□IOG Frean-tole 

□IOG Preartble 

MIOG InllD 

Section 2 

2-U,l DoRietron 

DIOG Praamhla 

DM Preamble 

MIOG Inlra 

Section; 2 

2-1 .3.2 OOffldlve 

□IOG Preamcilt 

DIOG Preamble 

MIOG Imre 

Seaton 2 

2‘1 4 C n .1 nl art wr cn i ro 

DIM Pwantue 

DM Preamble 

MM mira 

Sectcn 2. 

2-14.1 Danrvtton 

□IOG Praan-tole 

DIOG Preamble 

MIOG InLm 

Sedan 2 

2-1 * 2 Otnediv* 

DM Prearraie 

□IOG Preamble 

MIOG Inlro 

Sedan 2 

2-1.5 WhilL-Coljr Crime 

□IOG Praairtile 

DIOG Preamble 

MIDG Inlra 

Sotobnr. 2 

2-1.S.1 Definition 

DIOG Preamtole 

DIOG Preamble 

MIOG Inlra 

Sector 2 

2-1 5.2 Object** 

DIOG PreamtiiB 

DlOG Preamble 

MIOG Inlra 

Sarto* 2 

2-1. 5.3 Ranking of Aettvflifl* 

DIOG PrejTtole 

□IOG Preamble 

MIOG Inlra 

SecMjnJ 

2-1 £ Violent Crams* and Ma|nr Oflaodare 

DM Praarreie 

DM Preamble 

MIOG imro 

Sectian.2 

2-1.0. 1 Fugitive Subprogram 

□IOG Prean-tile 

DM Preamble 

MIOG Inlra 

Seaton 2 

1 2-1 .6 2 Govranmem ReseiYalion Cfimee Subprogram 

DM Preamtole 

DIOG Preamble 

MIOG Intro 

Secbcn* 2 

2-1 .0.3 Inter ante Ttrerft Subprogram 

□IOG PnearrtJle 

DIOS Preamble 

MIOG Inlra 

Sodwn 2 

2-1 6.4 Vokml enmec- Subprogram 

□IOG Preairtile 

DIOG Preamble 

MIOG Inlra 

SecLtm 2 

| 2- 1 .6 & Vroiem CrbreiB and Mepr Oifender&-OrpBnjEed 

Crime Drue Entpnoainenl Task. Force Bohwmrtni 

DM Praontiie 

DM Preamble 

MIOG Imro 

Section, i 

2-2 OTHER PROGRAMS 

DIOG Praeirtole 

□IOG Preamble 

MIOG imro; 

Seat or 2 

2-2 i [Helmed 

DM PraamOte 

DM Preamble 

MiOG inlra 

Section- 2 

2-2. 1.1 Dele led 

□IDG Preamble 

DIOG Preamble 

MIDG Inlra 

Sedron.2 

2-2 1.2 Detolwl 

DM Preamble 

DIOG Preamble 

MIOG imro 

Section 2 

2-2. 1.3 Dele led 

DIOG Preantiln 

DIOG Preamble 

MIOG Inlra 

Sec(ion2 

2-2 2 AppHcam Imrealgaltona - RemhursaUe and 

DM Preamble 

□IOG Preamble 

MiOG Inlra 

Section i 

2-2.2. 1 Definition 

□IGG Praairtoin 

DM Preamble 

MIOG Inlra 

Sec bcrn 2 

2-2.2 2 OejecHw 

DM Preamble 

□IOG Preamble 

MiOG imro 

Section- 2 

2-2. 2. 3 Ranking or AcPvGnh 

□IOG Preamble 

DM Preamble 

MIOG Imro 

Section 2 

2-2.3 Civil RiunlB 

□IDO Preamble 

□IOG Pdukrtrle 

MIOG imra 

Section Z 

2-2.3 1 □ din ill on 

□IOG Propmbkr 

DM Preamble 

MIDG imra 

Seciron? 

2-2. 3. 2 Obiertve 

□M Preamble 

□IOG Fit: amble 

MH5G imro 

Sacljon 2 

2-2. 3. 3 Ranking cif Act-vTnis 

DIOG Praambie 

DM Preamble 

MIOG Imra 

Section- 2 

2-2.4 FBI Security Program 

□IDG Preamble 

DIOG Preamble 

MiOG imro 

SeclrGn 2 

2-2.4 1 Dcfinrlim 

DIOG Praembie 

DM Preamble 

MiOG Nra 

Seclron 2 

2-2. 4. Z Object** 

DM Preamble 

DIOG Preamble 

WD6 Imro 

Sodibn 2 

2-2.4, 3 Rnnklng gf AaF*ip* 

DM Preamble 

DM Preamble 

MiOG Mra 

Section a 

2-2.5 Deleted 

□IOG Preamble 

DIDG Premie 

M»OG Imro 

Section 2 

2-2,5. i Defied 

DM Preamble 

DM Fra amble 

MiOG irtro 

Section 2 

2-2.S.2 Detelri 

□IDG Preamble 

DIOG Preamble 

WBOG imro 

Section 3 

2-2 5.3 Dueled 

DM Preamble 

DM Preamble 


Vcrsiw Ub1j«J: 
October 1 5, 2D] 


R-2 

UNCLA&SIFEED, '/FOLIO 


ITN CLA S S I F IHH'.'FOLJO 
DlfXr Supenesskamii 


MIOG Inlra 

Sedan 2 


KSaEaSSS* 

040G 2 SvjwraHHDn 

MIOG Ifflim 

Sedan 2 

2-251 Deleted 

HOG Preamble 

DIOG Praam be 

MIOG intrn 

Sedan? 

2-2*2 tewed 

HOG FraamWe 

HOG Praam t>e 

MIOG IflltD 

Sedan Z 

2-25.3 Deleted 

HOG PrBamHe 

HOG PraambiB 

MIOG Inin? 

Sedan? 

2-2.7 Deemed 

HOG PraamUe 

HOG Praam Ue 

MIOG Inlra 

Seaton 2 

2-Z.7. 1 Deleted 

HOG Praam tin 

HOG Pmambitj 

MIOG Intro 

Sedan 2 

42.72 Deleted 

DIOG Preamble 

HOG Praam Be 

MIOG Inlra 

Sedan 2 

2-2 r.'i tested 

HOG Praamy* 


MIOG Inlra 

Sedan Z 

2-2 B Defied 

HDG Preamble 

□H3G Prnombe 

MIOG Inlra 

Sudan 4 

2-2 6 ' Deleted 

HOG Praamtte 

HOG FraamtSe 

MIOG Inlra 

Sedan Z 

2-? 62 Deleted 

HOG Praarrthlo 

HOG Praam tin 

MiOG Inlra 

Suction l 

2-Z 6 3 Deleted 

HOG Preamtle 

DtOG Praam Be 

MJDGI.I 

Sedan 7 

M CLARlFiCAf ION REGAfiHNfl AM INVESTIGATION 
its OPPOSED to A PneLIMWfAHV INQUIRY 


DIOG 6. 8 end 7 

MOS-U 

Sfldlffn 7 

7-6 DEPARTMENT.*!. INSTRUCTIONS REGARDING 


Paragraphs Alt and 2 apy 

QUESTIONABLE GASES 


DIOG 6 t, ?nd 7 

MIOG 1 1 

SAdton 7 

T-2Q ADMINISTRATIVE SLSFOEnAS IN CHILD ABUSE 
AND CHILD SEXUAL EXPLOITATION (CSE1 CASES 


HOG 18 M 





Paragraph?. #2 (all sub- 

MIOG 1 1 

Suction 9 

ft-7.2 Use ar Ctafled Orcui Television ICCTV} 


parm: 3 ja9 aito-cuda). and 





4cmlU. DIOG 166.3 

MIOG 1.1 

SadkmK 

62-1 DOMESTIC POLICE COOPEiftATlON - STATUTE 

HBSi 


MOG II 

Suction 62 

K-3 3FDley 


Paragraphs * Sand 6 arty 

HOG 32 

IfflOGl 1 

Section 62 

Origwi 


HOG 14 

MlOGl.l 

Section 62 

62-3.5 CIsdirfEBtai-. 


DIOG 12 Sue new 343 

HOG 1.2 

Sucliai 157 

Section ST 57 Cwd Unrest (6 1 


HOG 12 

MKJGI.Z 

Sedhto 157 

157-1 RESPONSIBILITY OF THE BUREAU 


HOG 32 

WFOGI2 

S&GtKMI 157 

157-1. T Crtegunes Tor Repocanfl 


HOG1Z 

MOG 1.2 

Sociimi 1E7 

167-2 POLO REGARDING REPORTING DP CIVIL 


HOG 12 


□BORDERS 


M*OG I.Z 

SUCUMl 167 

157-3 RE PORTING OF DEMONSTRATIONS 


HOG 12 

1*001.2 

Sfldior 157 

157J PHOTOGRAPH* SURVEILLANCES 


HOG 12 

3*OGI.Z 

Setl MX' 157 

157-B DISSEMINATION OF DATA PERTAINING TO CIVIL 

OSOfiDERS and Demonstrations 


HOG 12 

HOG 1.2 

Sucbw 167 

157-5 REPORTING PROCEDURES TO BE UTILIZED IN 
CIVIL DISORDERS AND DEMONSTRATIONS 


HDG1Z 

HOG I.Z 

SocikKi 1 E7 

157-7 CHARACTER 


HOG 12 

HOG I.Z 

Suction 161 

161 -tD DISSEMINATION 70 THE WHITE HOUSE 


DIOG 14. IB 

COMPLEX IWHC1 


HOG 12 

Sttci™ 161 ; 

143-1 t tovufltijjaiJVB Request 


DtDGlZ 

WQG I.Z 

SfHTllftl 1 63 

163-2 INVESTIGATIVE INSTRUCTIONS 
PROCEDURES 


HOG 13 





In ptrt Paragraphs 171 a 

MIOG 1.2 

Ssriirxi 163 

103-2 t Oponag Ftmsign Rgbeg. CcHJpunahcn <FPC) - 


pnn p fif2; and nfi nnlyfeir 

General Cnmnal Mailers (GGM) 


now 153 CUMihcUllOTH 





DOG 12 

HOG 1.2 

SecUon 153 

1B1-Z.1.1 Lelter Regain^ Praoesa. 


HOG 12 

MIOG I.Z 

Soctran 163 

163-3 REQUESTS FOR TERRORISM ENTERPRISE 
INVESTIGATIONS 


DIOG a and 12 

HOG I.Z 

Suction 153 | 

153-6 REPORTING 


HOG 12 

MtOG 1.2 

Section 153 ! 

1*3-7 ftULE6(E| material 


DtQGia 

HOG I.Z 

3«11«1 153 

153-6 PRIVACY ACT 


HOG 54 

1*0G 1.2 

SudH>n 153 | 

16>0 RIGHT TO FINANCIAL FRlVACTACT 


DIOG Appundiii O 

HOG I.Z 

Sudim 259 

268-5 t AccuBaing Computer Records - Summery of 
Competed DiECtosura under Title 16. USC. &ecbtin27D3 


HOG IS 6.8 

MfiGI.S 

SUCHffl iM | 

2WS-S i l Sutprana -ECPA fleouremanla 


| HOG 19.6.0 

HOG I.Z 

Section 25B 

Zfl$-5 i 2 SubpoBfiniYflA PnorNolree Id We Subeenharof 
Customer 


HOG 18 8 0 

HOG 1.2 

Suclion 25H 

Z55-5 1 3 Sfldtan 270 JJdJ Order 


HDG 19 6.0 

HOG I.Z 

Section 259 

ZM-6 i A Sedicm 27Kt3|d) Order wWi Foot Net™ toll* 


HOG 16.6.0 



i 

? 

: 

' 

' 

•• 


HOG 12 

Section 266 

265-5.1.5 Search Wsrranl 


HDG 10.7.1 

HOG 1.2 

Sodion 259 

268-5- 1 6 VdAjntary Disclosure 


HOG m o s 

HOG 1.2 

Suction 260 

2ES.13.2 Lisa d a PatoorPrnwrt Ptnsnrw-Wrneg* n an 

DIOG Ilf 

DIOG 1661 and 15.62 



HOG 1.2 

Sudion 308 

308-1.1 EuMenoe Reeparree Team Mission 


generally DIOG IZ fdl 1 
h k perl assatancie 

MIOG 1.2 

SodiCrl 306 

305-2 DEFINITION OF ERT CONCEPT 


Paraflmpffi * 4 only plOG f 
12 

MIOG 1.2 

Sud cn 3W 

309-3 PROPER TURKING 


Paragrai* * 2 aMy. DIOG 1 
12 


R-3 

UNCLASSIFIED,' rFDLO 


Version Dated: 
SJtLTOlKf 15, 201 1 


UNCLASSIFIED ' ; FQUG 
DI(.Kf SeperaeSsium 


MIOG 1.3 

SpcbQn 908 

30&4 EHT SJSCLASSIFIDATiOMS-AILPHA 
DESIGNATORS 


Erann 

Parearapl' V i only, DtOG 
12. See nifwclaasHltaiiicieie 

MIOG 1 2 

Secton. jig 

319-1 INTELLIGENCE PROGRAM 


genuraiy. DIOG 5 

MIOG 13 

Socman Jig 

316-2 FIELD INTELLIGENCE GROUP (FIGJ STRUCTURE 
AMD FUNCTIONS 


OeneraHy. DlDG 5 

MIOG 12 

Sector. 3,19 

Sffl-* tNTELLtGENCE GQtXeCTBN 


Panearafito * ’ and 3 
peoBfaty, DIOG B 

MlOGf2 

Sector. SIS 

314-5 COLLECTION MANAGEMENT 


generally. DIOG fi 

MIDG II 

SbcIIdh 2 

2-5 COMPI.AINTS (RULE 9| 


DIM 14 

MIDG ll 

Stoltto 2 

2-6.1 An iflP-Lia! kill Of U S. Alltfrtey 1USA1 


DIOG 14 

MIDG II 

$«1n*! 2 

fc-6.9 Sww RrTKetUlffliTB 


DIOG 3, 12 

MIDG 11 

Sediixi 2 

£-5 4 Ali Hi only far Issuance* Warrant 


PIOS 19 

MIDG II 

Se-slion 2 

2-9.5 Ntotoston 1o Special Agent In Chafge IS AC: 


DIDG 14 

MIDG II 

SoctonE 

2-6 WARRANT OF ARREST Oft SUMMONS (RULE 4f 


□IDG 10 and 19 

MIDG 11 

Section 2 

2-6 1 Forms. d WanaiH 


DIDG 14 

MIDG 11 

Saclion 2 

2-0.2 Inauancn of Warrant or Senmnoni 


DIOS 14 

MKJG II 

Secton 2 

2-6,3 Executor* 


DIOG 14 

MI0G l| 

S«ta3 

2-7 PROCEEDINGS BEFORE THE MAGISTRATE (RULE 
51 


DIOG IB and 19 

MIOG II 

Sedioca 

2-7 1 Initial Appearance 


DIM 15 

MIDG 11 

Secton 2 

2-0 GRAND JURV LRULEfif 

DIOG 11.6- 11.0.1 

DBG IB. 5.0 and 10.5.5 

MIDG II 

Sorlioa 2 

2-9 1 Purpose 


DBG 10 6-9 and IS GS 

MIOG 11 

Section 2 

2-0.2 Persons. Prosenn 


DBG 10.5.S and 10.6.5 

MIDG II 

S«Uc*i 2 

2-4 3 Chsctoetire 


DBG TB. 5. 9 and 15.6.5 

MIOG 11 

SCscl km 2 

24 4 Enceptorm 

DOG 11,0 - IT. 9.1 

DBG 10.S 9 and 10.0 6 

MIDG II 

Seetofl 2 

2-9.5 bnUlflliw of Use 


DBG 13.5.6 and 10.6.6 

MIOG. II 

Socliona 

?-9,5 1 Mfll^nn Occurring Drttorai |h* Grand Jt*Y 

DBG 11 9-11.9.1 

DBG IS 5.9 and i8.6 5 

MIDG II 

Sections 

2-S.S.2 Physics Evidence end Stalcmenla 


DBG 10.5 9 vid 10.0.5 

MtOG II 

Section 2 

2-46 GDCurrerfaton tf Dtecioedree of Grand July Material 


DBG 10.5.0 and I3.Q.5 

MIOG II 

Secton 2 

2-06 1 Oetcurnanirticin r^ YiLerndi CVsdMUtes of Grand Ji#v 
Material 


DBG IS 6-9 and 18.6 6 

MIOG II 

Sections 

2-4.7 Storage ur Grand Jury Material 

DIOG 11.6 -11.9.1 

DBG 10.6.6 and 10.0.5 | 

«DG II 

Secton 2 

2-9 9 Requests *or StopotoMi in Ftigli™ 

DBG i1.9- 11.9,1 

DBG i8.4 .9 and ifl.6 6 

MIDG II 

Section 4 

54 Juveniles nd Juvenile Deklipireicy Act 


□IDG 15 

WOG II 

Section * 

4-1 GENERAL STATEMENT 


DIDG 16 

MIOG II 

Section 4 

4-1 t Puipowof Ad 


DIOG 14 

MIOG II 

Section 4 

4-2 SPECIFIC PflOWSIOMS OF THE ACT 


DIOG 19 

ttOG II 

Sector 4 

4-2 f CWlrflBns 


DIOG 19 

btOG II 

Secton 4 

4-? 2 Arrest Procedure 


DIDG 19 

WQG II 

Section 4 

4-2JlI Advice or RtglHa 


DIOG 10 

MIOG II 

Section 4 

4-3. 2. 2 Ntflificafon dl USA and jvvwrAn Peranis. 


DIOG 19 

MIOG II 

Secton 4 

4-22.3 rmgefjirinlTig and PhotogNiptling 


DIOG 19 

WOG II 

Section 4 

4-2 2.4 Press Releases 


DIOG 10 

MOG II 

Secton 4 

4 2 2 5 Irdcniltnra of Juveniles 


piOG 16 

ttOOll 1 

Section 4 

4-Z.Z.5 Intial Appearance Sefoie Magistrate 


□IDG IB 

MIOG II j 

Snclion 4 

4-2 3 CWenton 


DIOG 14 

MfOGII 

Secton 4 

4-2.4 Prosecutor* 


□IOG 19 

MOG N | 

Sec bon 4 

4-2.5 Use ol Junenie Records 


DIOG IS 

MOG II 

Section 7 

-57 Irrlnvwra 


□IDG 10 64 

II 1 

Secton ? 

7-1 USE OF CHEDENTWLS FOR IDENTIFICATION 


DIOG 10.50 

MOG II 1 

Section 7 

7-2 THOROUGHNESS. PRECAUTIONS. TELEPHONIC 
AMD USE OF INTERPRETERS 


woa is s* 

WOGII | 

Secton 7 

7-2.1 Thansudtineei antf Preoauliocis During lf«»vie*rt 


□IOG 10.50 

MOG II 

Secton 7 

7-2 2 Tnito phene IrrlRrvnyvK 


□IDG i9 60 

4*0011 

Secton 7 

7-2 3 L'secf liltopieiera 


□IDG 1B.S.6 

MIOG II 

Secton 7 

T4 RMUiHB*3 F0IHQ- AUTHORITY 


DBG 19,5.4 

W06II | 

Section? 

74 ONE VS TWO AGENT INTERVIEW OF SECURITY 
SUBJECT 


□IDG 10.50 

MIOG II 

Section 7 

T-i EVALUATION' OF AN INTERVIEW 


DBG 19.50 

MOD II | 

Section? 

7-6 INTERVIEWING COMPLAINANTS AND SUBJECTS 
OF CRIMINAL 


□IOG 10.56 

MBGl! 

Secton 7 

7-6 1 Interviews ri tompiainflrtn 


DIOG 10.50 

MIOG II 

Section? 

7-0.2 Kutyarli d Crannal taumsftgatons 


□IDG 100.0 

MIOG II 

Secton 7 

7*7 DEVELOPMENT OF DEROGATORY INFORMATION 
DURING INTERVIEWS 


□IDG 19.56 

MOG II 

Section 7 

7-0 IDENTIFICATION OF SUSPECTS 


DtOG 1B.50 

MOG II 

Section 7 

7*4 INTERVIEWS INVOLVING OR RELATING TO 
COMPLAINTS 


DIOS 1636 and 4 


Yerairm Dnled; 
CkhibCT 1 5, 201 


H4 

UNCLASSlFIEffl/FOUO 




L.'NE’LASSDTED '.EOUU 
GILlCh 


Part 

Swllflfi a&elhsn TVU# 

DIOG 1 Supersession 

DIOG 2 SuperMfS’slo-ai 1 

MIOG 41 

Strike 7 

7'9.1 Compkinti RecmubO ol Ihg Rield Qffign 


DIOS 1ft 50 and 6 

MIOG 11 

Ski but 

7-9 2 ComjiliWTls Person or by telephone 


DIOG IB 5.0 and 5 

MIOG 41 

Sfldliofi 7 

7-9 3 Gmrpairtls £Sy LeUe* 


DIOG 1&56 andS 

MIDQ II 

Section 7 

7-9.4 Conidamls CdliPal d the FBI ct lla Employee* 


□IDG 15,50 and 5 

MIOG II 

S*d.wi7 

7-0.5 Legal HequiBrneda of Hie Ptwaoy Act dM074 (Trite 
5.USG SecliLHi 552ai 


DIOG 14 

MIOG II 

Section B 

S9 SLFVDltanC!B9 


□IOG 10.5.0 

MIOG II 

Section 9 

9-1 GENERAL GUIDELINES 


DIOG 1 S 5 5 

MIOG 31 

Scclbn 9 

9-1 1 S.irvnflanwi Rwlndkjn? 


DIOG 19 

MIOG II 

Sections 

9-7.5 Sarvedlflrrte Losii 


EHOG5 

MIOG II 

SottKie IQ 

Sift Records AyaOtfe end Inyesiigalrye Teciwiaoes 


DIOG 10 

MIOG II 

Section 1G 

IQ-1 INTRODUCTION 


□IOG 10 

MIOG 11 

Section IQ 

10-2 RECORDS AVAILABLE 


DIOG 15 

MIOG 91 

Sector; IQ 

10-3 INVESTIGATIVE TECHNIQUES 


in-pvt DIOG 15 

MIOG II 

Section lQ 

1M MAIL COVERS 


DIOG IB 9 m 

MIOG II 

SeCfnrt IQ 

1d4 1 Untied Slalci Postal Service ( LiSPS j Regulation!! 


□ IOG 156 ID 

MIOG II 

Section iQ 

10-B.2 Fofcy 

DiOGU.a 

DIDG 15.6 10 

MIOG II 

Sector; iQ 

10-0 3 fietwefling Awd-oyal 

DfOG 11.3 

DIOG 1ft « to 

MIOG H 

Section ia 

1D-B.3.1 FiAjillMC to Crlnirial Cuseii 


DIDG 15.6 ID 

MIOG 11 

Sectwn 10 

id-t-,3.2 Nslffirrai Seoirrly Cases 


DIM 15.6 TO 

MIOG 11 

Section IQ 

ID-7 STOP NOTICES 


□IDG 

M|OG 11 

Section IQ 

10-7 1 Denntftor 


DIDG 

MIOG 91 

Sector IQ 

10-7 ? Pl«enn»iiti3< SJcp* 


DIOG 

MIOG 91 

Sedan IQ 

10-7.3 Indexing Slops 


□HOG 

MIOG 11 

Sectcir, IQ 

1 0-7.4 Re*roMtf of Stope 


DIOG 

MIOG II 

Seeton ia 

1D-7.6 Type* of Slops 


DIOG 

MIOG H 

Section iQ 

1 0-7 51 Sevasjs Bonds 


DIOG 

MIOG II 

Section IQ 

IQ-7. a. 2 Immgraton and NaturNia'alton ServH» 1 IMS | 


DIOG 

MIOG II 

Section 10 

IQ-7.5.3 Bureau lJ F*ftsef» 


□IOG 

MIOG II 

Souun IQ 

iD-H Stored wire and electronic 

COMMUNICATIONS AND TRANSACTIONAL RECORDS 

ACCESS 


DOG IB S ! 

MIOG 41 

Section Id 

1D-0 1 Compelled Disclosure of Ihe Cartlmli at Sicced Wra 
□r EMdrpnic CtiirmunicalinnK 

HtOGII.12 

DOG 10.B.B 

MIOG II 

Section IQ 

10-43 Access a Tuamsadwnsi InfcumuiBn 


DOG IS ,6 9 

MIOG II 

Section IQ 

1 P-0 5 Access Ip ana Use tH Eiedrona Convnunicaticns 
Located on Ihe ImaneL E-Mai and Butelin Bound Syalcrm 


DOG 13. 6. B 

MIOG 41 

Section IQ 

104.3-1 CWdJtois 


DOG te @0 

MIOG II 

SecSian IQ 

IQ-53.2 InLeritgllPii or ElediOric CefflOlLtfiktoSiortS 

DIDG 11.12 

DOG 13. 6. B 

MIOG II 

Section 10 

1 0-8.3 3 Ljnclenco«er ikw or Ihe internal 


DOG Ift.S.B 

MIOG II 

Section ia 

10-04 Monitoring Ihe Internet 


DOG 18.0.B 

MIOG II 

Section 1C 

10-9 ELECTRONIC SURVEILLANCE lELSURJ 
PROCEDURES AMD REGDIREME1FTS 

DHMlI.ia 

DOG 10.7.2 

MIOG II 

Seaton IQ 

IQ-9 t Calintians 

□IOG 11.64 5 

GOG 10.7.J 

MIOG II 

Seaton 10 

1Q-9.4 ELSUR 5er*ChlflQ Procedures 

WOG 11.6.6 

DOG 13.7.2 

MIOG II 

Section 10 

IQ-S.UJiEiflditjpc aurwllsnoe- Tine m Criminal Matter 

ceOG It 12 

DOG 10.7 S 

MIOG II 

Section 10 

ID-9 11 Emergency Ptavieiorii, Tile III Cnmmiti Menem 


duos te,7.? port 
nararsooe msrno 

MOG II 

Section 10 

10-9 11 i F&mi 2 Repoh 


DOG 18 

MIOG II 

Section 10 

TD-9.11 2 ComfinlKn erf Form 2 Repaid 


GOG sa 

MIOG II 

Section 10 

1D4 T1 .3 SLUmflalens of Ft™ 2 RepKt Ip FBIHQ 


DOG ia 

MIOG II 

Section 10 

10-9. 1 1 4 Supplenvonul Farm 3 Re^sqfl? 


COG IS 

MIOG II 

Sedan 10 

10-9.12 ELBLffl Indeicing m Tile III Crlimnai Mullers 


DOG 13 

MIOG II 

Stolen 10 

10-9 1 3 Marking at Roc&rdingc far Idcnhhcnlirjn 


DOG 40 

MIOG II 

MIOG II 

Sedion 10 

Seaton 10 

ID-9 14 LOon at Electronic SunniitantoB EquipmoiL Id State 
and Locgl Law Enfprcamont Adi!«np» 

10-9 15 Subrnsiwi d RKXjnjngt 


DBG 12 

DOG 19 

MIOG II 

Sedan 10 

10-9.15 rmnaerlptwad' Rucahlinya 


DOG 13 

MIOG II 

Section 10 

1Q-T0 CONSENSUAL MONITORING - CRIMINAL 
MATTERS 


DIM 106 lend 1042 

IflOG II 

Sedion 10 

10-10. 1 Use d Consensual MomLeirtop m dimhai Metiers 

DIOG 11.5 

□IOG 15.5 1 and 156.2 

MIOG N 

Sedan 10 

1 0-10 2 Momtorng reiapncne CcrwErrMltans a Crirrwisi 
Mailers 

CLOG 11 1 

DOG lftft.l *tkH0.62 

MIOG II 

Sedan 10 

lil-iO.2.1 AsobwId FTecorfflnps and ln*orroatiap Cdnoemau 
Monitored Imrale Taiaphone Cal* -in Farters! Frwons 

□IOG T1.5 

□ IOG 15.5 1 and 166 2 

MIOG II 

Sedan 10 

14HCL3 McrnlEfipg ftontaispho™. Canununi«l»an* In 
CrifTHiRl Matter 

DIOG 11.5 

DIOG 1B.6.T end 156 2 


ft-S 

UNCLASSIFlEDWK3fU0 


Vwitafi Unictd; 

Oftmitw 1 5, 301 1 




Ur^LASSIFJEDfrTOUO 
DttH'i SufKsriseviiurjs 


MIOG II 

10 

i(MG.4 Montipnng CoirmunicallDna with PefBonaGulfllOa 
tin? United Statisa 

DIOG 1 Supersession 

DtOG 10.6. 1 and 16.6.2 

MIQG II 

Section to 

13-10.5 E13UR IndfiKifig InCdrfifi'rairil MonHottilg Meitism 

DIOG 11.5 

DIOG 10.fi 1 and 10 fi.J 

MIOG II 

Section 10 

13-10.5. 1 AdmlmalrBUDri cl EL5UR Records Re^ai drug 

00011.9 

DtOG 166.1 and 160.2 

MIOG H 

Section to 


OH3G11.S 

O10G 10.6.1 and 18.92 

MIOG II 

Sticbqn 10 

1 0-1-0 J Pen fi eastern ^Dialed number Recorder) 

DtOQH.1T 

□IOG 16.6.0 

MM 9 

Section ID 

1&107 1 ErrargiJniry Ptovisnrn 


DIOG 16 6 9 

MIOG li 

Section id 

T0-1Q.6 Electronic Tracking Device* 

□IOG 11.0.3 

□IOG 10.7 2 

MIOG 11 

Section to 

1 0-13 3 Ooeed Clrcwt f session (Cttv) |VWeo Ontyt - 
Criminal Maneru 


GM 18.6 3 

MIOG ii 

Section TO 

TB-IO.a.l CCTV ftumorualion - Crtnnal Maters 


DIOG 16 63 4-5 

MIOG II 

Section to 

10-19.92 CCTV - ELSUR Reconb Grmn.il MkKiis 


DM 18 6.3 

MIOG II 

Section 10 

10-10.0.3 CCTV (Audio and Video) - ELS1IH littering - 
Grimirral Matters 


□IOG 16.6.3 

MIOG II 

section 10 

W-HUW CCTV - Preservation pi the Qrtotnai Tape 


DIOG 1683.7 

MIOG II 

Section 10 

1 D-10.16 Media Recorders iFofrrarty Tape Rttxirtei.i 


□IOG 166 1 

MICKS II 

Section 10 

19-10 1 1 REntio ttmnoono 


□IGG 18.6.1 

MIOG II 

Section 10 

1ti-ia.11 1 Paging Deulcm 


□IOG 16.61 

MIOG II 

Section 10 

10-ID 1 1 .2 Cwdlees, Tetephcnes and outer Types or Undo 

Mem In mo 


□IOG 106.1 

MIOG II 

Section ID 

ID 10.11.5 Cellular Ttiophones 


DIOG 10 SI 

MIOG II 

Section 10 

ID-ID 17 Trap-Traoe Prcceourea. 

DIOGTI.If 

DIOG 1060 

MIOG II 

Section ID 

10-101? 1 Emergency Pnjwkirsns 


DIOG i860 

MIOG IE 

Section 10 

10-11 FBI UNDERCOVER ACTIVITIES • CHOANAL 
MATTERS 


DIOG 160.13 

MIOG II 

Section 10 

10-16 PEU PRINCIPLES AND POLICES FOR ONLINE 
CRIMINAL INVESTIGATIONS 


□HOG Appends L 

MIOG U 

Section 10 

10-10.1 Online CdnniLniGdlkmi 


□IDG AffHHida L 

MIOG II 

Section 10 

10-19.2 Monipnng Online Commurttations 


DIOG AppWdm L 

MIOG II 

Section ID 

1 0-1 B 3 Access »o Stored Ekrdmnu; Infarmalmn 


DKX5 Apponrtu L 

MIOG II 

Sechon 10 

T 0-1 6,1 Record Retention and D^semlnalton 


OtOG 14 and Apperdis L 

MIOG II 

Section ID 

ID-1 B.5 LArdemc™ Or*n? Comrru nation p 


DiOG Apperidv L 

MIOG II 

Section 10 

10-1 0 6 imemffiior>al Hrsues 


□IOG Apttendu. L 

MIOG II 

Section ID 

10-10 HANDLING AMD PRESERVATION OF AIRCRAFT- 
MOUNTED VIDEO AND FORWARD-LOOKING INFRARED 

DIOG 11,66 

DtOG 18.8.36 



IFLIRI EVIDENCE 



MIOG II 

Section 10 

1«0 MAJOR CASES 


DtQGApperdiK K - Mpjra 
cases; 

WOO II 

Section 11 

Stl TecluiKpjea md MAchmio nf Arrest 


□IOG 18 

WHOG II 

Section Ii 

11-1 ARREST TECHNIQUES 


DIOG 19 

MIOG II 

Section 11 

1M 1 General 


DiOG 10 

MIOG II 

Sectiw n 

11-1.2 InBlaJ Approach 


□IOG 19 

MIOG II 

Section 11 

11-1 3 Search d She Ftorenn 


DIOG 10 

MIOG II 

Section Ii 

11-1.3 1Hlgll-Ri5* SeendVFuEBOdy Seandl-titirdmmng 


DIOS 19 

MIOG II 

SecticBi 11 

H-1.3.2 Fm&i Search rind Collection artwdafra 


DIOG 10 

IWOGII 

Section 11 

11-1.4 T ran spcrLs lion rtf Arrtraled Parsons 


DIOG 19 

MIOG II 

Sectice 11 

f 1-1.5 HarKtiiijftmg 


DIOG 19 

MIOG II 

Section 11 

11-2 PROCEDURES FOR ARREST 


DIOG 19 

MIOG N 

Sectiqm 11 

1 \-l 1 Arrests and Searches 


DIOG 19 

MIOG II 

Section 11 

11-21.1 Types df Anesl Warmnls 


DIM 19 

WQG II 

Sedlw n 

lt-2.15 Author Hy to Se*va Ariaal Wahanls 


DIOG 19 

MIOG II 

Seaticn 1 1 

11-2.1.3 SumrwifjnB and SutilwenM 


DM 16 

MIOG II 

Bed ion 11 

1 1-2.1 4 Arreola WHtiotA Wamama 


DIOG 19 

MIOG II 

Section Ii 

11-2.1.5 Fnrcfcb Enlry 


DM 10 

MIOG II 

Sodiwi 11 

1 1-2 1 .6 Search Ql the Faraon 


DIOG T9 

MfOG II 

Section 11 

11. 2. 2. 2 Property nl Prscinnr 


DM 19 

MIOG N 

Section 11 

i 11-2.2.3 Rnmvai of Prisoner From She Custody cil Ihe U S 
Marshal 


DIOG 19 

MIOG II 

Section n 

11-2.3.2 lAmcal Allcntsin for Bureau SUSjedS 


DM 10 

MIOG II 

Section 11 

1 1-2 3.3 Arrest -d Foreign Nanbnate 


DIOG 19 

MIOG II 

Section 11 

11-47,1 Juv^iltw 


DIOG 19 

MIOG II 

Section 12 

12-2. 1 Deadly Frtffia - Eljndurds Mr Otyjsrona 


DM has pdf of poticy Irc 
A6oerrfft)( F 

MIOG II 

Section 14 

1 4-10 0 FmoamilntiiiBi dI Juvenile* tyr Fader efl Agancie* 
undertime Viotenl Crime Conlpot and Law Ertronewinertl Ad 


DM 19 



df 1PM Itieusnfllter tin: Adi 




Vemwn Baled; 
Ot-lnber 15, 2D1 


R-6 

UiNCLASSIFIED^TOUO 


[_TN CLA S 3 IF lliD.'YfTJLfO 

DFGG Supcrwasiooi 


miooii 

S«tan '6 

IM.1 2 Dialed Nurrflwjr Reecrdera [Pen fibsters) 


Paragraph U 1 last Nnt 
oenlnnce*ar4y DIOG 

18.6.9 

MIOG 11 

Section 10 

1 6-i. 1 .3 CHnonvaal Mefliltmng: (Formerly 10-7 4. 1 ) 


Paragraphs 4 3 and 4 only 
OIOG 18 81 

MIOG ll 

S^tnnlS 

l*H 1 A Electronic Surewlianco- - Title lit 


DIOG 1ST2 

MIOGtl 

MlOfi il 

Section 10 

SffdXin It 

1H. 1 .5 Efecbranlc SitoveiBanoe FISA 
iM 1 6 Telephone Toll Recants 



DIOG 1B.7.3 

DIM IB 

MIOG II 

Sect bn IS 

1B4.2.Z Coon Ordered Ekidromc ju^eillurce -IRCUi 



QIOG I6ftfc iS.7.2; and 
J0.7.3 

MHX5 il 

Secs on 16- 

16-4.2 3 CtHmiling True hr TIUe IK Elodrffiie SurYerldiice 
(RCUl 


DIOG TB.fJ 

MIOG II 

Sect ci n 16 

164.2.4 Emergency Elnctmnc 5urvallanaHRCU | 


DIOG 1 8.6 ft. 107 2 and 
10.7.3 

MIOG II 

Section 10 




0<3G 10 7 2 and 10.7.3 

MIOG II 

MIOG II 

Section 10 

Sedton 10 

10-4.3 ConBenaual McnilMng - Teddn'esl Assistance (RCUJ 

1644 Elec Ironic SLXvelllanae (ELSLfRli IrtercepUnna, |RCU| 



Paragraph ff 1. hmtlwn 

sentorKM* only. OflUG 
1B.0.1 and IB 6.2 
Paragraph # 1. finsl 
sefllanoeaMy DrOO 

IB 7 2 end 1B.7.3 

MIOG II 

MIOG II 

Sector It 

Seaton 10 

10-4.4.2 Toleccrrurunf^alkMia mterceOidn* - Repcrtmg 
Rpqureiner's fTICTUI 

1M.4 3 TeiTOSTimuniwliont - use of Pw Registare and 
tfBM-traoKJTlCTUl 


DIOG 107.2 and 18.7,3 

Paragraph Hf 1 mly. OdOG 
10.6 9 

MIOG II 

MIOG II 

SfiCtKjn 10 

Setflc-Ti 10 

10-4.4.4 Pen Registers and Trapa-Tracei Reporting 
Rnnuiremnn* fTJCTUS 

1&4 B 1 Adi tvoneed Use- ui Technical DeMicm lit Candudlng 
Physical Surveillances, fTTUJ 


DIOG18.6.B 

Paragraph tt 1. second, 
Ihtod and fonh senierces 
dlUv. DIOG IB 

MiOG II 

Spcdon 10 

16-4.6.4 Technical Devise® to Physical SuroeHafies - 
Technical. Practical, and LeqtH ConsderaLlcjna fTTLIJ 


Parasraph 4 1 Dnly DIOG 

10 

MIOG II 

Seaton 16 

10-4, S ^ Aulharqnd U»t4 Eioamnlc Tracking ard lecpting 


DIOG IB 

MtOG II 

Seaton 10 

104.8 12 Tratfijlg -Tfcfinfeal, PraatoM. pnit Legal 

Co n«1 Baritone (TTUt 


Paragraph <t t. Paragraph tf 
a , Ihmd sniWmoo- 

Paragraph 4 4, second 

MCOGII 

MCOGII 

Section 10 

Seaton 10 

IB-4.9 Gbeedtrcurl TeteyiacrtHCGTV) [YSUi 

10,4. 1 3.1 Avnilnbtily and Contra! of Tochricai Equpmnnl 


EMOG 10. E. 3 

Paragraphs #2 and 3 only. 
DIOG 10 

Moan 

Seaton 10 

16-4.134 Lcsri of Electronic SurveWanca Equlgnient 


DIOG 12 

AfcQG.ll 

Sea ton St 

21-12 APPREHENSION OF BUREAU FUGITIVES 



FTaragrapTi # 1 only DIOG 

19 

MGGII 

Seaton 21 

21-13.4 Policy 



Paragraphs S 2 and 3 cmly 
OCOG19 

MtOG II 

Sodton 81 

21-20 FUGITIVE INVESTIGATIONS FOR OTHER 
FEDERAL. AGENCIES 


r’aiagraph ti 3. mvt 

1 aUssiliL-jliLfi 343 replaces 
ea. Dioq ns 

HfcQGN 

Sedton ii 

31-E4> 1 Fdpinra toqiaries. Atmwd nn Bern?* of S 
Marshals Service (USMSj 


Paragraph If 4. new 
ntissilicaliiyi 343 rnpIncsS 

S2 DIOG 125 

WtOGII 

Seel ton 21 

23-2 THE FAJfT CREDO REPORTING ACT 


EHOG Append in M - FCRA 

MOGH 

S 15a ton 23 

23-2 1 Stuaon 1641 b Pflfimiion* 


OOG Apfwndin M - FCRA 

WOG II 

Seaton 21 

23-2.2 Sedan 168-1 b Pema^rtjb PrappM* nf CnneumiF 


DIOG Appendix M - FCRA 

**ogii 

Stud ton S3 

3S-2.3 Seaton 1Sfl.il Dectosurae to Government Agencies 


OFJG Append it: M - FCRA 

MIOG M 

Seaton 23 

23-2.4 Seaton 1661g. Osojuswe td COnauInfcrS 


D40G Appendix M - FCRA 

MCGII 

Staton 23 

23-2 5 Seated 1 68 la OorapUBtoGS Procedures 



OIOG Appsndra M - FCRA 

MtOG M 

MIOG II 

MtOG II 

MIOG II 

Seaton 23 

Seaton 23 

Seated 23 

Seaton 23 

23-20 Summary 

23-2,7 Pennine* 

23-2. B Sncllon 160 In, 0, q. and r Chid and Cnmnnl Lmbnty 
tor'.VtolFul or KEeqrtqnnl NnrKjgmpitoncfl, 

234.4 tolerviewe m Fpmiyi Countries 



0»G Appendix M - FCRA 
0*06 Append™ M - FCRA 

D4QG Appendix M - FCRA 

£»OGie 

MtOG M 

Sea ton Z3 

Z3-4.1E1 ExIrsierrtiodsS InwesEigflllvB Acwhy 

DIOG 11.B 


DIOG 1B§ 1 and 186 2 

MtOG II 

Sadoiifl 

23-6 true w. Right to financial wbvacy act of 

1&701RFPAI 



DIOG Append is 0 - HFPA 

MIOG II 

Sed ton 23 

23-6 1 5Lfll'jle 



DIOG Aupsidi* O - RFPA. 

MIOG II 

Seaton 23 

23-6,2 Amws la Financial Records 



DIOG Appendi* 0 - RFPA 

MIOG II 

MIOG II 

MIOG II 

Sedton 23 

Sachem 23 

Seaton 23 

23-6.2 1 Intent 

23-6 i 2 Methcds Aypieljl* la FBI 

23-0.2 3 Method Not Available Id FBI 



DIOG Append* O - RFPA 
DIOG ApporvSs O - RFPA 
DIOG Append* O - RFPA 

MtOG II 

Section 23 

23-6 3 Oehrimona 



DIOG Append* 0 - RFPA 

MIOG II 

Seaton 23 

23-e 3. 1 Financial Inabtutofl 


DIOG Appendix O - RFPA 


UWCIASSOTEI>nPOUO 


Versiisi Daijsd: 
Owtdsf !*, Ml I 




unciabsifiehjfdlio 

1>H Ki SuppSTSCMKHte 


MtOG ii 

Setdrm 23 

234 3 2 FflfldGlBf Record 

DIGS 1 &upnrsB**jgn 

PIOG 3 SupaneMion 

MtOG II 

Sad ion 21 

2343.3 tSowornrrajnt Authority 


DIOG Appendw 0 - RF PA 

MiOG II 

Section 21 

236.3 A Costantem Covered 


DIOG Apcendw G - RFPA 

MiOG II 

Section B 

23-6.3 6 Lew Enforcement Inquiry 


DIM Append* D - RFPA 

MUG II 

Section 21 

ZM.4 RtraucmiblNy or Fittoiriai IratilulKni 


□IDG Append n. 0 RFPA 

WOG II 

Section 

23-6.5 GetTfflcaUon afOamptiance 


DIOG Append* D - RFPA 

MiOG II 

Sadion 21 

236.6 Mtithtos of AcofcLS 


□IOC Appnnnu 0 - RFPA 

MttGII 
MIOG II 

MtOG II 

Section 23 

Sadion 21 

Section 23 

Z3-E6.1 Customer AuctiortzalkM 

2346 2 Soerdi Warrant* 

£1-6 6.1 Formal Write* (Rtaqueal 


DIOG Aftiendw □ - RFPA 
DIOG Append* 0 - RFPA 
DIOG Apgendnt Q - RFPA 

M* 00 II 
MEG II 

Section 23 
Section 21 

2 34.6.4 Judicial Suopoene 

216 a 5 Grand Jury Sutpoena 


DIOG Ap®end« 0- RPPA 
DIOG Appends Q - RFPA 

M»OG II 

Section 23 

236 7 Customer Notice 


DIOG Append* G - RFFA 

MIOG II 

l*OGll 
MIOG II 

Section 21 

Section 23 
Sadion 21 

236.7 1 Cdmenlfcof ISIotea 

236.7.2 Delay of Notoe 

216 -1 Customer Challenges 


□IOG Apoendi. G - RFPA 
DIOG Append* 0- RFPA 
□IOG Append* O ■ RFPA 

MiOGII 

Section 23 

236.B Ernetpency Access 


DIOG Append*: □ - RFPA 

**QG N 

Sadion 23 

23-6 10 Exception* In RFPA 


DIOG Append* 0 - RFPA 

MIOG II 

Section 23 

236.10.1 Financial ItuUntora 


□IOG Append* a ■ RFPA 

fc*QG II 

Section 23 

236 10.2 Corporations or Other Legal Entitas 


DIOG Append* 0 - RFPA 

MQG II 

Section 21 

236 10.3 Net Idenlilimte mAh Customer 


□IOG Append* Q . RFPA 

MtOG II 

Section 23 

236.10 4 Panes n interest 


□IOG Append* D - RFPA 

MCE N 

Sactiran 21 

336 10 S Furfural Grand Jury 


EMQG Append* Q - RFPA 

•MIOG II 

Section 23 

236. 106 Fortigrt Counter Intelbgenca 


□IOG Append* D - RFPA 

iMQGU 

MKIG II 

itOGll 
MIOG II 

Section 23 
Section 21 

Section 23 

Section 21 

236. 10 J Tdwtxjna Company T di fieconta 
314.104 Other 

236.11 Qaaemrirtion O' tofonralion 

23-fl.11 1 T-p Peptomant rf JuFticn 


DK3G- Append* 0 - RFPA 
□IOG Append* Q ■ RFPA 
EHQG Append* D - RFPA 

DIOG Append* o- RFPA 

MOG II 

M»QG II 

Sadion 23 

Section 21 

236. 1 1 .2 To DM, fin Departments, 

236.12 Penatna 


DIOG Append* RFPA 

006 Append* 0 - RFPA 

MIQG II 

Section 23 

B41J.1 ChrN 


□LOG .Append* 0 - RFPA 

MIOG II 

Section 23 

236.12.2 Dlaciptiwy Action 


EMOQ Append* O - RFFA 

MIOG II 

Sadion 21 

236, 12. 3 Oi tor 


D*0G Append* o - RFPA 

HOG II 

Section 23 

236. 1 3 C*M ReYrtPurtetorH 


EHOG Append* O - RFPA 

WOGII 

(Section 23 

234 H fieqMtoo FtatHuraments 


£HGG Append* 0 - RFPA 

MIOG II 

Sadicn 23 

216.14.1 □issemnnNiis tit Inlnrrnalien Dtilainad 


EHOG Append* O - RFPA 

MIOG II 

MIOG II 

Section 23 

Sadion 2B 

236.1-42 SlsUslical Reporting; 

23-1 ATTORNEY OENERAL'5 GUIDELINES ON 
METHODS OF OBTAINING DOCUMENTARY MATERIALS 
Hp.|J3 ^Y THIRD PARTES 


EHOG Append* O - RFPA 

EHOG Append* C 

NRPM 

Section 1 

Ot-2- (U) the National Security List 


DIOG Append* G 

JJFIPM 

Sector, t 

61 --3' (V) ACrmymi 


DOG Appendix P 

VflPM 

Sncton i 

a 14: (UJ FUaCt43Mrlfe»tkMl and Ali.Yia DesignalkJns tar 
■nvesligalive and Adminiahalive Activities Which Lfrngunty 
Fat WHNn t)h 0 Purview of Ito FBI's National faraiQP. 
IrflBfllonwfl Pmarsm 


CPDsffilSO SoeRPQ 
wec-paqe 

«F]PM 

Sector, i 

02-i. i;u> General Investigative and Aamnistiallve Activities 


Appendix M tar deftiirtiona: 
HZ. 6. 7. 16, 12, 14. 15.ia. 
IB 26. 26. 25 and 27 

NFTPM 

Section 2 

62-2 |Lf| National Semnty Imweirgdlkms 


DIOG 5, a, 7, a, 9 

MFlPM 

Socton 2 

02-3: jU] Summary Guidanoe and AppticatnUy rf Threat 
Assessments 


D*0G & 

MF1PM 

Sections 

(K36: StoimsryGuclBnce and Apcticarticms tar 

PtStiH-ninery Inveetoalrons 


DIQG 6 tmd IS 

WlPM 

Secton! 

D2-5: lUJSunwery Gudance end Appfcation iw Full 
Irrveatiqaikins (FI) 


CnGG 7. 0. 3 amp f« 

NFIPM 

Section 2 

<326: 1 U| CuHedkm of Foreign Ims4lpdiv* 


EHOGti 

NFlPM 

Sector, 2 

02-6' {UJ Ofhto of Ongm 


DfOG 14 

HFIPM 

Sector. 2 

024 (U) PhySh^ato Ptolo^phic SurveSsncea 


EHOG 1 0.5.B 

NflPM 

Secton 2 

62-13: (UJ Nr^vews In Natoto! Sacurty lnveetigeliD<is 


D*OG T9 i 6 

WIFM 

Section! 

flE-tl: (U) Educattln Racmds lBli*lay AmendmontJ 


EHOG Append* 1 

MflPM 

Soctoni! 

fffl-12: (Uj Polygraph Etominations 


DIOG 1ft * T 1 

MFIPM 

Section 3 

(tZ-14: (UJClA. Noma Searches 


DIOG 1 9.2 and Append* G 

WIPM 

WIPM 

Sadon 2 

SectKi n 2 

02-15: (Uj Pnyaita: SatrrCtoa n Which a (Va-rLnil tir N« 
Required 

•ffif-1 6' (U) Montenug Oeuncwi Which Da Nm tinpcne Upon 
ftrawyirttite EMMdBtorfl ol Pmracv 

DKfflIM 

DIOG if- r 

EHOG 16.5.3 

MFIPM 

Sector 2 

02-17: lumetionai Seccnty Letters (Na.) 

DIM 11 DM1.9.3 

D*OGt9 6.a 


LMfltet S 5. 2(1 1 I 


R H 

UNCLASSTFlJE.Dw'/FDlX? 



irNrLASsirirn.-.Tfiut' 

DKXj SyjKMCUiiiitffi 



Sachem 2 

02-19 [UJBosinaM Raowda 

PIOC 1 &upara«tlan 


NFIPM 

Sechan 2 

02-21: (Uj Mml c™« 

0B3&11 3 

C»0G 18.6 1ft 

NFIPM 

Sac lien 2 

□2-22: (Uj Opera bom CrtnUuclort nulsuln the Untad SUrt**. 
IhwCtAWOU 


See CPO MOO Library 

NFIPM 

SbcIidi 2 

D2-23 ilfl Tba Rata or Lagw Anacdas inFw&gn 
CiXilterirtdlcjBiiCe. foreign Intdliguiife and 
CwirtHsctnrrarian Irwcalnalims 


Sera 100 PO 

NFIPM 

Section 2 

XS2-2*' (U) Odhawwa “laaal AoUvIHea 


DID0 17 

NFIPM 

Section 2 

ft2-2S: (Uj Arreste. Iwefckalana. C&amafcheG and 


DIOS 1 9 - ArrteM PiocDdLup 

NFIPM 

Saclion 2 

D2-29. <Ui Laboratory Assistance 


SaaLaa wab-page 

NFIPM 

Sachem 3 

02-32- -LUI- eimd Fstn Program 


DIDO 19.3. tg.4 and 
odpeiidic G -TE.C 

NFIPM 

Seebew 2 

02-33 lUj FnjrpgnCoonUirlnl^lIqpncj) and Cwr4*rlHmjnBm 


•HOG Appendix G - 12.C 

NFIPM 

Scclian 2 

Q2--34' (U? Special SumuJlanca Grmip (SSGl Program 


□IOG 19 58 

NFIPM 

Sacbcm 2 

02-33 iLr|- The Behavcirai Analysis FfogiBm |0APj 


DOOtB.4 

NFIPM 

Seel ion 2 

EE-35: (U) lovaalH^abonsof CuTTWitend Former Depsrimenl 
or Sbaia PerSCcinel, and QpkHftSbG Mourns. Personnel 
Abroad 


DIOS 10 generally 

NFPM 

NFIPM 

Seebon 2 

Sadiun 2 

02-37: |Uj Invoaligaliura tA CiMfftrli Brat Fattier Central 
Intnftqonce Aqoncv Pcnmnnal 

02-36 (UJ IneestiaaliiifTS af Currem end Fonper MHIary and 


□ItxS ID. generBUy 

DIOS Ip. germ rally 

NFIPM 

Section 2 

G2-39: {U | In ves lion lie ns cf Currenl and Former Depan morn 


□IDS ID. gere rally 

NFIPM 

Seeban 2 

Q2-4D (U) Invest Igallona or OBw Gcrvamment Agency 
Pwssmrtel 


DIOS 10 

NFrPM 

Swbon-2 

02-41. (UJ licreotgdtbcia ol While Hbuse Personnel 


DIOS 10 

NFIPM 

3m bon 2 

02-42' CU) InrvestigHlttws of Fre&deniiei Appomieas 


DIOG 10 

NFIPM 

Sac Item- 2 

02 43: |U | Invealignbcira b# Members uf lhe Juibcjiiry 


□nos io 

NFIPM 

NFIPM 

Sacbon.2 

So chon 2 

02-44 pUtlnvnBbgBCbrH of Merrbera or lhe LI S, ten g nr as 
and llwrr Staffs 

02-lS: (U) 0taBfl*ntrtabr*g InSarmaton 1o Olbsr Agencies lit 


DIOS 10 

BKX3 1J443UQS 14 

NFIPM 

5acbQH2 

Ccimm tines 


□IDG 124 and 14 3<AK4j 

NFIPM 

Sacbpn.2 

02 AS: tUl Disseminating mtonnalKin io lhe FacM Judiciary 


OCiG 52 4 

NFIPM 

Sechun 2 

02-49 |U | QIadomnaCng InfiTnia'ien In Ehe While House 


□IOG 1 £4 amt 14.5 

NFIPM 

Section. 2 

02-50: CU) Dhrsemii-jlmg fata nm* lid it Id Firfign 
-GovBmTrmrlx and bivnsIlnalKina at Ihc-r BtttinsJ 


C*OG l^iiDIGO 14 i 

NFIPM 

SoctiQltJ 

02-Si' (U | DiEseirinstmo Intormaten Lo SIew? d ™t Loctf 
GD^emmert Aoenc^as 


□IOG IE and 14 

NFIPM 

Section- 2 



□IOG 143 |AI| 5-fit 

NFIPM 

Saclicm.2 

02-&*. |U,I II1A 1 Integrated InwWgenoa information 
Abpttcallcfl'i 


Sw iHA wnb-puge 

NFIPM 

NFlPM 

Becbon.2 

SccbLin 2 

02-Sfi [UJ Intelligence Ovvrsi^nr Board Madera 

U?“G7 (tfjiAlpfin Dnatgnjlion* 


PIQG4,'D|DG 

(fl&NSLsJantfCPD 

Disafa 

CPfiitOOISO SeaRPO 

uveb-naoe 

NFIPM 

NFIPM 

NFIPM 

Section 3 

Section 5 

Section 3 

D3-1. [U) ConawiBLial Monltomf 

M-2: (U i VoUnTteewl T ape Recording? 

054. (UJ Pan Regestta end Trap and Trace Devicee 

DtOOH.S 

EHOaMCBtfi 

DKK3 If. 11-11 12 

□IOG 16.61 

DIOG 10.517 
□IOG 1E.G9 

NFIPM 

SeOwn J 

03-V (U) Unconsented tiecboec SuryBUianca 

DtOOTI.lS 

DIOG 1073 

NFIPM 

Sedan 3 

0%fl' <UJ Etocbrantc SiAwiltBncwMrwiiiisiiflri. Legs and 
tndnM 


□137PG 

NFIPM 

Sectnn 3 

03-6 (U) Opipelwnai Supped lo lt>t intelliaBnoe Coirmunity 

&tOG 12 SiDIOtS T4 S 

DIOG 12 

NFIPM 

Section 3 

03*9 (U) Op^elicnK Tectmolcgir DNiwan (OTD) Taphncsl 
Aeaiatance 


CPDJ»17ftG 

NFIPM 

SocHjfi 3 

Secron 3-10 rui Operational Tficbnatogy Drdensn 
(□TDhT«hnic3l AssitanDe Support la lhe Intelligence 
Ctjnununltv 


PKJG 52 (gpnnmily) 

NFIPM 

NFIPM 

Section 3 

Sedsqn 3 

03-11. (Uj Unoonaentad Phyi-tal Seaicbes 

03-12' (Uj Tge R«i#n Infarmalipn 

□IOG 1113 

□IOG 10.7 1 
Appendt* N - T» Hebum 
Into 

NFIPM 

Secton 3 

03-1 3 (Uj Seercheo ot Moil WiUiuuL Consml 


□too 10.71 

NFIPM 

Section 3 

03-14: (UHJnconflamBd Pftyakat Search MHiiirKtaiiai, Logs 
and IndeKinq 


DIOG 1S7 t and SMP PG 

NFIPM 

Sector A 

04-1: iUfTta Dcanain Program 


DIOG 6. type 4 
aawsfimunls -qpnarallv 

NFIPM 

Secaon 5 

| 05-Z: (Uj CouMHeb on the Curraml NaUonat Saciifltv Ust 


Appar«die G 


lt-9 

trNruvssiFn;D,'-T'(«;(v 


Vcrckm noied: 
Owldbar ]?. 301 1 




UNCLAS S [FlEDi'iTOL'd 

UlEXi Sopervessinns; 



Section 

So ebon TiUn 

DIQG 1 Supersession 

DIOG 2 Supersession 1 

NFIPM 

Section 5 

95-23: <U) Wfitia Designation* 


CPU 4001 5ID. SeftRPO 

NFIPM 

SwikKi 6 

96-12; <U) Hf&m Designation* 


CRD-ttODlSD SeeRPO 

NFIPM 

Section 6 

09-11 : <U) Alpha Designatione 


CRD PQD15CI SeeRPQ 
wob-KJW- 

NFlPM 

5*diwi 9 

09-0- (U) Atptia Designations 


CFDHOGISD. See RFC 

NFtPM 

Section 11 

11-4: (U) Alpha Dcngruticuii 


CPC #001 SO- So# RPQ 

NFtPM 

Section 12 

12-4 (U) Alpha Designabone 


CRD F0D1EB, SefrRPQ 

NFtPM 

5*dNn 11 

194: (U) Alpha Designation* 


CPO«01M> See RPQ 
wes-oaoe. 

NFIPM 

Section Id 

14-4: (U) Alpha Designatcrtia 


CRD UODISD SeaRPO 

NFtPM 

Section IS 

154 (U) Alpbo Originations 


CPD4SO015D SoeRPQ 

NF*M 

Section 16 

16-13: tU] Alpha Designations 


CPD (PQD1SD See RPQ 

NF.'PM 

Saertm Ifl 

u4 1 Iesub Threat Prshmmnry invrobgatpns 


DI0G6 

NFIPM 

Section IB 

1 64. |U'| bans Three! Full InvesHgalicna 


DK3QT 

NFlPM 

Sectmn 18 

IflHi: (U) laaue Threat: FUe mirroeci 


CFDKB15B SeeRFO 

wec-otiuH 

NFtPM 

Section 19 

194' (U) Pt™dumf Ftaquiromoni* n dtsmBtionp* 


DIOG 5, B, 7, 6 

NFtPM 

NFIPM 

Section 19 

Sod ion 19 

194: tU) Cktsmp International terrorism tnvestigatiora 

1H1- iL!) The BeOarvKiral Analysis Program 

DIM SAT 

DM S.8.7.8 

DIOG 19.4 

NFIPM 

Section 19 

IB-13: -fUJ Alpha OealpnKicirfi 


CPD (KtOISD.SeaRPO 

NFtPM 

Sedk*n30 

KF& lUj n*e BehavTotel Amatos Program 


DM 194 

NFIPM 

Section 20 

2D-HHU| Alpha OeSignMitira 


CPD ifOOISp. Sen RPQ 

NFlPW 

Section 2 1 

5i 1-6: 1U] Apha OeargnMone 


CPD KJD1 5D. See RPO 
web-ueus 

NFIPM 

Soclkm 22 

22-2: tU | Alpha Qesiyrntfcin* 


CPDHW0I5D SmRPO 

NFIPM 

Section a? 

CorsildeniMi Humen Sources Manual 


GkSPM 

NFIPM 

Section 27 

Canti Central Horan, Source Valrdnlkm Stiaiijnnl* Manual 


C3HV5M 

NFIPM 

Section 2B 

Section . ZB {U | Undercover Operations (4) 


DIOG and NSDCOPG 

NFIPM 

Section S& 

20-V IUi UC Operations 

DIM 11.12 

D*0G 16.6.3 amt 
NSUCOFG 

NFIPM 

Section 2B 

ZiZ (U) Group 1 

DIOG It 12 

OtOG 10.6 3 and 
N5UCQPG 

NFIPM 

Section 18 

2fl-3:(U) Group ii 

DIM 11.12 

DVDG 10.6.3 and 
NSUCOPG 

NFIPM 

Seditin 2B 


DIQG 11.12 

(NOG iS.6.3 *id 
NSUC0P6 

NFIPM 

MAQP 1 

Section 30 

MART 

0-t 

AppenOv I 

Menr<irapdLrr or UndarstarcKi'p between the Notional 
AfiionaiAics and &uaoe Admiiv&iruLOH and ihe FBI 
Auttrotity o t Ih* Dreclc* 


DIOG 194 

CPO MOU Lteltiry 

DM 3.21 

MAQF I 

21-7 19) 

Men hating. docLmeriCrip And reviewing 


DIQG 34. D 





Pd'ayraths ST S end F 5. 

MADPtl 

t-1 

SAC end ASAC Svpeniurery RnptniiWltr 


DIQG 34. C and 





□dirv 

WOP 11 

1-1.4 <# 1) 

Superv^on or Gases 


Paragraph » 1 - DiQG 14 

WOP II 

1-1 ,*(fl tana# la- 
ri 

Supervisory Fite Reviews, 


Pnragreph U } pnd fl 3 |n -fj - 
*■2 Supervisory File 
reviews and fl 3 PSAs. 
□*QG 3 4 0 

WOP II 

t -i.ii 

Official Ctiannets 


Paragrapii (5) & only - 
supersedea tiy CPD D152D - 
FBI Policy Cycle Dradlva 

MAQP II 

i-a.s 

Designation Of Senior ResadenL Agenl and Atiernnfe 


Seconfl andlhmJ Bentencee 
only - DWG 3 4.C arid 
sjuL-ession and delegation 
ml icv 7 

MA.OP II 

M.e 

Repodlng to HfiJ CHy 


Find and iecund aentenoe - 
fie reviews every 90 days. 
(NOGJ4D 


Vtfam Bawd: 
CVlntw 15. 201 I 


R-iy 

UNCLASSJ FIEDviTOLIG 



I'yciASSinEm fold 


□DG SaftfiCShkjQi 


WOP IF 


S^BvayJ wrwbgitiQnfi 


and succession and 
doimnrtisn miKiM ? ! 

MAOP II 

UAQPI4 

1-3.113(i#| 

2-3 

0»w F Inmi 


All Iparagrojihs 1-6) - DIOG 

34 P 

DIM in 

MAOP If 

3-11 

pLBpoan 


□IOG 14 

WOP li 

2-33 

General Pcfley 


DIOG 14 

MAOP II 

24.1 

htdeaing and S.nrinlmn* 


DIOG 14 

WOP II 

2-3 .3.1 

Mandatory Indfrjung 


□IOG 14 

MAQPII 

WOP II 

2-3.32 

344 

DweaorEary todewng 

Ininr Oau 


DIOG 14 

OIQG 14 

MAOP li 
WOP IF 

2-3.4 1 

24*2 

KJenwyng, Data 

Daunptswi Oata 


DIOG 14 

□IOG 14 

WOP II 

244 

♦ndteung flj&duiremenid er General btdaae Veraue 


DIOG 14 

MAOP IF 

346 

Has fu nap iitea 


□IOG lend 14 

WOP II 

2-3. a. i 

Spatial Aijfinl 


inst Introductory Paragraph 
only. DIOG 3 

MAOP II 

a'i.e.a 



□IOG 14 

MAOP IF 

MAOP II 

2-4 

2-4 t 

Managaffitnl or F*e& 

ln¥MH 5 ?|iV 0 Film. 


□IOG 14 
□IOG 14 

MAOP II 

2-4.1 .1 

SUrtlttETfl 


□IOG 14 

MAOP II 

2-4. 1.2 

Zero Fisa 


Paragraph]!) only DIOG 
14 

MAOP IF 

2-4. 1.3 

DuLiik- Zero Fies 


□ICG 14 

WOP II 

2-4.14 

□sad Flies. - Fta Pending inveetgBhan 


DIOG 14 

WOPIL 

2-1, 1.5 

Ccnlml F4sn 


Paragrapfi (l)fiisi tour 
sentences Dnlv. DIOG 14 

MAOP 11 

2M_2 

Aennrvsrraiive Files 


DIOO 14 

WOP IF 

2-* 3-1 

MijnmwKfegjrtArtj P*95 


□IOG 14 

WOP IE 

244.6 

ConedldaUofi at Flea 


□IOG M 

WOP 11 

24.3.7 

RedessiRcjlion ot Files 


□IOG 14 

WOP 11 

2-S 

Casa Ma-iageinar! - Find □flU.-in 


□IOG H 

WOP II 

2-5-1 

Oprnnrj Cmhjs 


Paragrapne 1.11.4 (fihlal 
paragraph onFy before sub- 
tattert). 4ri 4a, 41. and 5 
Ifmst seniors tjnhrl DIOG 
irsnoits BKhnns 

MAOP 11 

Z-5.1.1 

Leads 


Panujaph (21. defele 
"Dtscreljonary AdfcifT leads 
Ki Ffflt sentence arty, and 
lieFtfeZb fflDGH 

MAOP II 

MAOFU 

MAOP FI 

2-E.2 

2-3 2.1 

2-5.2, 2 

Sinful af Casas 

Pedtfpg -Case 

Ponding Inaxli™ 


□IOG 14 

DIOG H 

Paragraphs 2. 2a-c. and 3 
ortv. DIOG 14 

MAOP n 

2-52.3 

Referred Upon Cempleticrt be die Office rf Qip*i i RUC) 


DIOS11 

MAOP 1 

2-5 2 * 

Owed 


cnoGe.ii.7ii.#.e.ftij 

MAOP H 

2-5-2. 5 

Ueaddreseed Wert 


□LOG 14 

MAQF 11 

3-T 

FBI Ciassm&rtions.'Bub-casBiricahcflB and Program 
GraagilngB 


CPC Ml ED RPO-RAUtt 

rtWT ISBpOrcBJWo lor this 
Brea by EC 56F-HO- 
107*17 serai 70S. Link to 
RPO wefr-sHc Supersede 
sechun 3 1 and all siiiparis. 

MAOP II 

3-1.1 

FBI ClBssifkallcns and Suttawdnd ClasuAcabans 


Qrty SZD. E2E rtpliiced Mil 
new 343 classhicahun. 163 
M-U daurflErtkin added 
QtQG 12 

MAOP II 

3-3 (5c> 

Fas* Fora Officers (dehned) 


DIOG i.32 

MAOP II 

342 {1} 

j 3-pooal TURK Rucdrirty PrCamunri (1 1 Mflpr C jeshk 


tnfH* DIOG AppondH 4- 
Ata lor Cases 

MAOP II 

M5 

Case Court Intormelion ((* 9 ™: closings) 


Paragraph a 9 a-y was 
BLporsedti by DIOG 5 1 1 

7 11: W and 3 1? 

MAOP II 

34.6 

RMasaliyrg Cases ana Error CwrecOtw 


□IOG 0.11 C, 7.11.0. 
6.6.C; mdftl2.q 


It'll 

UNCLASS FIED '/FOU 0 


Version DmmJ: 
OtcinlB- 15, 20] t 




UN CLASS IFIED/™ UO 
DTOG Su|*enftteFweis 


Part 

Section 

Section Title 

HOG 1 Snpuruunn 

M ■' !.!41.IWWfW 

MAQPII 

3-4 a 

CWriinal PtelntinBry Inquires 


Paragraph 41 only. E4QG 
S*ddro S 7 . PIS ere 
authonied for $ monttis: 
extension aLnhonzed Tor 6 
additional ntoffiJia oy SAC, 
(Wirt FFCtHH sn 

MAQP II 




04OG14 

MAQPII 

M ADR ll 


SpIn-ofT Caaea (paragraph #2 - who ran nullwriaai 

Cpnfpl FUm SParagraph #1 - chrfnetj 1 


DIOG 5, 8. 7. B, and 9 
sjpai'sedad paragraph ffl . 
i defined m OtOG 14 

MAQPII 

3-4.11(2) 

Dorfrul Fites (Paragrapfi *2 - teadsl 


supgrsfldod pamgnph # 2. 

CHQG 14 

MAQPII 

Mil (3) 

Control Ffles (paragraph! «3, IterO wnterwe only) 


dwelt! Inird se nten ta Only, 
EHOG 14 

MAQPII 

MAQPII 

9 

*4 

□issoinnaEur, rt Inf tarnation 

Iriffma^Hfi |g Be Gwemmiilwl 


DIOG 143 ^rurally) 
DIOG 143, 14 4, t*.4uml 
14.6 

MAQP II 

MAQPII 

9-3 (paiBQiapti 1 ) 

SI-3 {paragraph 2) 

AO Menro 9/21/2391 - ■Disaemlrsaling Infannabon Id 
E nhance PutJie Sutov and Natural Secumy. - 


DIOG 14.3.4 and B 

0R5S1* 

MAOPII 

B-3 (paragraph 3.1 



1X0 G 143. A. B 

MAOPII 

ft&l 

Drise-liiruiliun to Slats jrtl Lfiofll Criminal Aislite arid 


DBG 14. 3. A3 

MAOPII 

■ita.i .1 

Dissermnalian Ip State and Uotal Qrmnal Anbqn Agnnpns 


DIOG 141 

MAOPII 

9-33 

Inter maun TctoUy Wrirtnn Jiaisddian of Other Federal 
Aqonrjf-s 


DIOG 144.0 

MAQPII 

9-13 

Irrtcrrntfion wrtf>n FBI Juradtebon and or mtarasl Lo anolfter 
Fader a Aoarey 


Q0QG14E 

MAOPII | 

B-3.4.2 

IhleTeSied Agaricy OjLmJb j3 F -akl Office Tcrrf.Lf'ji 


DIOG 124 

MAQPII 

9*3 4 3 

interested Agency Wrm*i a Fted Office's T armory 


DIOG 12.4 

MAOPII 1 

93:4,4 

Reporting InFomsalhxi Furnished 


DIOG 15 4 and 123 

MAOPII i 

93 E 

Method of DtesemlraUDn to oiAaiaa Ageross 


DIOG 124 and 12 5 

MAOPII i 

9.3.53 

Oral oisserrwirtnn In Outsria Agronm* 


DIOG 12 rod 14. gerrenriy 

MAOPII 

MAOPIr 

MAQPU 

MAOPII 

9-3. 5. 4 

B-4.S.S 

94.2.9 

9-6 

Accourrllng or Dsramflol&n 

invi«iigatiw Actrv*v In Congressional Otfires 

Dissaminahon to Ihe White House Compton 

Map* Cases - Diss&nhiiliuii of Irriutaurffcn 


DIOG 15.4 and 12 5 

kiteivlevi or CHS - DIOG 

IB 5.8 and CHSPM 
telarv™. orCHS-QIOG 
1B5.6 PaiaaraphiZ) 
Soiierseded by AGO-Dcni. 
EJtOG and AG Memo IVH 
CoraBTlq 

DIOG Append* K - Mejnr 
Cases 

MAQPII 

9-7 

Threat to Ufa - OiBsemnatian d 4 Inlormslton 


0106 14 

MAOPII 

9-7.1 

lnfnmifl|iDn Concerning Thrpal* Agampl thfl and 

Qlher Deeonated Offteiais 


DUG 14 

MAQP It 

9-73 

liilrtmaiMin Gawenilng Threals, PussiL/e Uutonoeor 
Demon atm liana. Against Fareigsi EsIaHiahn-ior^K nr Officials 
in | he US 


CNOG14 

MAOPII 

9-7.2. 1 

InlDTPalicn Received Through other Than Technical 
S^rvpilBnpe 


DIOG 14 

MAQP It 

9-7.23 

inim-ngiicjn Received Thnju^ Technical Stiruetllancs 


DWG 14 

MAOPII 

B-7.2.3 

MltiCBteneLas 


DIOG 14 

MAQPII ' 

MAOPII 

s-e 

9-B.1 

Raphes to Foreign Police ant! mtehtyenra Contacts 

Letterhead MBmorantte Prepared by Bureau's ForeHffi 
Otlteea 


DIOG 14 

TMQG 14 

MAOPII 

MAOPII 

99.2 

99 

OissenwiMton ot ClessCed Iniamelkin 

Pwemnsslim of Grand Jtry Material 


DIOG 12arvt14 

DIO'S 190 £ 

MAOPII i 

9-10 

□iaaeiTuiaicm of Trite XI, Right id Fiitanefel Ph«ilv Ad of 
19711 


DIOG AppeniixO -RFPA j 

MAQP II 

913 

□ is jam nn ho n ByFwkt Inbelltgonra Group* 


CWOH 

MAQPn 

iWr 

General Rules ReganTOg Recording and Ncrirhceiian ol 
inveEbgaUons 


Supomodo PamgrapO* a 

ia-c. 2a<: i: 9: 1: 9: ite-c 1 
11 - 16 : ros 2W4. QtOd. t 
teKira Heclteds 

MAOPII 

I0-1D.9 1 

Appicwul by Mfe&ute Oolognted la Act an Bo hull gl 1 higher 
Bureau Officiate 


□ IOQ3.4.C 

MAQPII 

MAQPII 

10-1? 

1910.2 

titles made During mwestioatioite - irtlBrvtewe 

OffloH- of Origin 


DIOS3 and 14 

C40G 14 


Vernirai DnLsd: 
IXdlbcr L5 r 20l 1 


Rh.I1 

UNCLASSIFIEDi/FOLIO 




UN C LA 5 S IF IE D - TO EJ 0 


QlfSG fwp=ra««nfj» 


MAQPb 


Monitoring, Documarciing arid Revievdrig 


Remove second to lest end 
Iasi seniHiw Qi^r. Remove 
LriisiKin In MAOP at Ihenme 
□f Paragraph *1 6 and add 

ptalion "See OtOG 3 * tr 

HA 

EC 

31BT-HCI-A1407067-IN5O sol 247 


34-D 

Ni'A 

£C 

To Provide- Gudancs on Least Irtrualve Teelwi*ies In 
National Sttunly an Crirtaml Irivesliyu linns - OGC iC 

1 313&HQ-A1 46772P-OGC Stri* I. 1 272Q12M7 

OrtOG4.4 Il.t.1 

BlOG4,4.4,1fi-.1.1-2 

HA 

EC 

Mail Cover dies ■ EC dated 12126-200* 

DIGG 11.3 

□IDG 1b.fl.1D 

MIOG It 

1D4Q 17.1 

FD-670. Consensual Monnnrng - Tetephene l>w-fcltsl 

woe 11,8 

□lOG 1B.ST 

HA 

form 

FEN671, CortMWual Monawing - Non -In top hone ChMkSai 

DTDG11.fi 

□hDG 10.6.1 

HA 

EC 

Electnonw Surv&lloncs - EC- deled i2,'20i2M7 

&W1I 12 

W0G 1S.7.Z-3 

Ni'A 

EC 

Cni Lfcarttosanij Privacy 

EC Bimt hyQGCtfoirxi 37HWWH 


C*OG4 1. 6.3 6.1 BLl 15.3 

HA 

EC 

Civil libertiee and Privacy 

EC issued by OGC dated ft'MDOS 


DIM 4,1, 7.3 

HA 

EC 

Ldb 3 Inlrusr.q Todhraqw? in Nartpnal Sacurfly and CimnaJ 
InvBsilftaiionR - EC issued by OGC on 12/WH2D&7, 
climber 3igK-HCFAT4fl772ij-OGC- 


DIGG 4, 4.4, 1B.112 

HA 

EC 

PrcKecbon of Flral Amendmenl %r h ts 

EC eaued by OGC dated 3.'1 BCfflJ* 

EC issued by CTD diried OWDIjHHM 


□IDG 4.2 

HA 

iC 

EC isaacd Err OGC doled 11T&MQ3 

FBI NaliontfCoilecwn Reqi»rwr«nts 

EC ^Suetl L<yOO listed 0113012003 


OOSR.1t 

HIA 

Ed 

RjalErtKlr- and Dissoii ins Iron of Privacy f-.~. Roccniy 

EC wwed Sv OGC darted 


DIOG B.13 

m 

WA 

EC 

EC 

ECS issued by OGC dated 0371 O' 200a and RflUHHG 
Authorised Investigalive Merthofe tn Fail invesitKatons 

EC issued t?* OSC darted 1 Gf39i2M3 


CRCGl«.3. 165 

DUG 10.3. 16 7 

HIA 

EC 

e edera Granii Jury Subpoena 

EC ktwd by OGC elded 06101 WOT 


OtOGlfl.S.B, 1 6*5 

HA 

EC 

Admuustralrve Subpoena 

EC issued bv CID dated D6IU&200I 


SMOG 10-64 

HA 

EC 

VotunlBrv Derasaune or Nait-Cwrtarrt Cualonw RkmhSi 


EHOG 10.0.6 

HA 

EC 

Definition or lnve«gartrvB Mamed 

EC issued by OGC stated io^i.2»3 


DM 155 3.3 

HA 

EC 

FIS* Reuipw Board for RISA n*n*wU* 

EC i»iie«9 bv DtkIw'e Office deled CEWHHK 


DIOG 16 7 3. 1.5.3 

HA 

EC 

Assisrtfldce to Other Agemdes 

EC Issued by OGC dated laittMa 


DTOGT2 

HA 


Emergency OiedMiire Pita rein n for Intwmation hum 
Service Pravideri Urdar ia U.S.C Secton 27'0fi|b] - EC 
•Med by OGC flflraSlSofHi. me number 60F-HQ-1O6515S 
mil BflF*HD-C136(!flO 


DTOG10 

LH3A 


OjnsciHJai&d Legal Ha™*ooh ior Specai Agento Sectton 7- 
4.H71 into Iniervia* Section or DIOG 


WOG 16 

HA 

EC 

EkjtdrtFiic RtaSardrig al Ctmfassioni and YVAnHis tnlnrvKJWs 
■EC iKUBd by OGC OT 00030006, Ha nynUwr «F-H0- 
1233466-1 and WF-HG-C i iWU'jni 


DtOG 10 

HA 

EC 

FBI Mandat Ftp Rpnew Pnjeess ■ EC by INSD d<i 

OWTOTIO. (lie number 3 1»T-nO-Ai-t67M7-B*SD-247 


G4DG6 

HA 

EC 

EJacIrcniL Resairdngi ur Conrassi&nH and Wtn&si kiletvknn 
- EC issued by OGC on Q3J23/2DQG, Ha njmters &iiF HQ 
C13M9T0 nnd fl«F-MQ-t3tti4Sa 


e*0G 16 

HA 

EC 

PrDrxduref and OperalEinal laiiann ■ GLidance for i 

LeBBlatwComjplion . EC by CID 0*1 06 l CSl2fl(». 

a* number 31 9W-HQ-A taj^SG-CI^U 


EHOG 10 

HA 

E4UEAPFO 

FBI Employee AsMUanue Urll. Emptayw AEBiBtar-ioa 
Praoram PG -SefetB definition or task force emoer on page 1 


•DTOC 3 

HA 

Rap Toe* User 
Guide yl.1 

Resmann ABoc^mn Panning (RAPjTwI. Ij^r GuhH vl t - 
damns dsfmriNcn of lesk tome oflcflf end task force merrfter 
flnjBflflj 


OTOG3 


lfc.13 

l/N CXASSJF1 E&'/F OUO 


Vmiirti Dated 
OntoMriS.3011 





UNCLASSIFIED FOR OFFICIAL USE ONLY 
Domestic Investigations and Operations Guide 

APPENDIX S: (U) LISTS OF INVESTIGATIVE METHODS 

S. 1 Investigative Methods Listed by Name (Alphabetized) 

(U) Administrative subpoenas. (Section 3H.b .4j 
(U) CHS uw and recruitment (Section I S.5.5 > 

tU> Closed-circuit tdevision/video surveillance, direction finders, and other monitoring devices. 
(Section 18,63 1 

(LI) Consensual monitoring of communications, including electronic communications. (Section 
1 8.6.1 1 

(LI) Electronic surveillance - FISA and FISA Title VII (acquisition of foreign intelligence 
information). [Section 1 8,73 1 

(U) Electronic surveillance - Title HI. (Section 3_<v7_2') 

(U) FISA Order for business records. (Section 1 5.63 1 
(U1 Grand jury subpoenas. (Section 18.63 1 

(U) Grand jury subpoena* - only lor telephone or electronic mail subscriber information in Type 
1 & 2 Assessments. (Section 183-9 1 

(U) Information voluntarily provided by governmental or private entities, (Section 1 8.5,7 ) 

(U) Intercepting the communications of a computer trespasser. (Section 1 ji.-6.2 l 

(U) Interview or request information from the public or private entities. (Section 183.6 1 

(U) Mail covers. (Section I 8.6, 10 1 

(U) National Security Letters, (Section 18.6.6 1 

(U) On-line services and resources, (Section 183.4 1 

(LI) Pen registers and trap/trace devices. (Section 18-6.9 ) 

fU ) Physical Surveillance (not requiring a court order), (Section 18,5.8 1 

(U) Polygraph examinations. (Section 18.6. 1 1 ) 

(U) Public information. (Section 183.1 ) 

(U) Records or information * FHI and DOJ. (Section 183.2) 

(U) Records or information - Other Federal, slate, local, tribal, or foreign government agency. 
(Section 18-53 ) 

(U ) Searches - with a warrant or court order. (Section 1 8.7.1 } 

V!." -In ' li.-'V.| 
l.i '.tO * ; ’i '’.ii! '. i 
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(U) Stored wire and electronic communications and transactional records, (Section 18.6.8 ) 

(U ) Trash Covers (Searches that do rot require a warrant or court order), (Section 18.6.12 3 

(U) Undercover Operations. (Section ISA 13 ) 

S.Z Investigative Methods Listed bv order in DIOG Section 18 

18.5. t (U) Public information 

38.5.2 (U) Records or information - FBI and DGJ, 

18.5.3 (U) Records or information - Other federal, state, local, tribal, or foreign government 
agency. 

38.5.4 IU) On-line services and resources. 

18.5.5 l U) CHS use and recruitment. 

18.5.6 (U) Interview or request information from the public or private entities. 

18.5.7 (U) Information voluntarily provided by governmental or private entities. 

18.5.8 (U) Physical Surveillance (not requiring a court order). 

18.5.9 (U) Grand jury subpoenas - only for telephone or electronic mail subscriber information 

38.6, l (U) Consensual monitoring of communications, including electronic communications. 

38.6.2 (Ul Intercepting the communications of a computer trespasser. 

18.6.3 (U) Closed-circuit television video surveillance, direction ilnders, and other monitoring 
devices, 

18.6.4 (U) Administrative subpoenas. 

18.6.5 (U) Grand jury subpoenas. 

18.6.6 (U) National Security Letters. 

18.6.7 (U) FISA Order for business records. 

18.6.8 (Ul Stored wire and electronic communications and transactional records. 

18.6.9 (U) Pen registers and trap-trace devices. 

18.6.10 (U l Mail covers. 

18.6.1 1 (U| Polygraph examinations. 

38.6.12 (U I Trash Covers (Searches that do not require a warrant or court order). 

3 8.6. 1 3 (U) Undercover operations. 
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IM.7-1 (U) Searches - with a. warrant or court order, 

I S,7.1 (U) E lee iron ic survei I lance Title III 

IS.7.3 (U) Electronic surveillance - FISA and FISA Title VII (acquisition of foreign intelligence 
information). 
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